#!/bin/bash # =========================================================== # create the CA private key - encrypt it with AES256 # =========================================================== # -aes256 encrypt the PEM output with AES 256 # -out ... output file name # 4096 size of the private key in bits # =========================================================== # for help: openssl genras -help # =========================================================== openssl genrsa -aes256 -out ca/ca.key.pem 4096