Create a self-signed Apache/HTTPS certificate on CentOS

Create the key and set a passphrase:

openssl genrsa -des3 -out server.key 2048

Create the csr file making sure the CN (common name) matches whatever domain name it represents such as “www.agix.local”. This requires the passphrase from the step above:

openssl req -new -key server.key -out server.csr

Remove the passphrase:

openssl rsa -in server.key -out server.key.nopass

Generate the self-signed certificate:

openssl x509 -req -days 365 -in server.csr -signkey server.key.nopass -out server.crt

Now you can use the new certs and key in your apache config.