cd /root/certs openssl genrsa -out default-serverkey.pem 2048 openssl req -new -x509 -days 3650 -key default-serverkey.pem -out server.crt echo "" >> default-serverkey.pem cat server.crt >> default-serverkey.pem echo "" >> default-serverkey.pem rm -f server.crt mkdir /etc/hiawatha/certs cp default-serverkey.pem /etc/hiawatha/certs chown www-data:www-data /etc/hiawatha/certs/default-serverkey.pem chmod 400 /etc/hiawatha/certs/default-serverkey.pem