Install openssl # sudo apt-get install openssl Create a serect key (e.g. server.key) # sudo openssl genrsa -out server.key 4096 (e.g. no password - do not use 2048 byte key) # sudo openssl genrsa -des3 -out server.key 4096 (do not use 2048 byte key) Alternative: Skip (invalidate) a password (e.g. server.key) # sudo openssl genrsa -out server.key 4096 Create a public key (e.g. server.csr) # sudo o