Self-signed certificates

Creating self signed certificates (test on NanoPC-T2)

Copy CA chain:

cp /etc/ssl/certs/ca-certificates.crt ./fullchain.pem

Create a self signed 10years long certificate:

openssl req -nodes -new -x509 -keyout key.pem -out cert.pem -days 3650 -subj "/CN=server-test"

where server-test is /etc/hostname

Generate public key

openssl rsa -in key.pem -pubout -out public.pem