openssl で自己書名証明書を作る

# openssl genrsa -des3 1024 >/etc/pki/tls/private/redmine.key
# openssl rsa -in /etc/pki/tls/private/redmine.key -out /etc/pki/tls/private/redmine.key
# chmod 400 /etc/pki/tls/private/redmine.key
# openssl req -new -key /etc/pki/tls/private/redmine.key -out /etc/pki/tls/certs/redmine.csr
# openssl x509 -in /etc/pki/tls/certs/redmine.csr -out /etc/pki/tls/certs/redmine.csr -req -signkey /etc/pki/tls/private/redmine.key -days 36500

その他必要なパラメータは対話式に入力。