My weekend project - Create a self-signed SSL certificate instantly and for free(cert-depot.com)

  #!/usr/bin/env bash
  # Helper script for generating ssl keys/reqs

  #Set the variables used for the script
  #Expands filenames and paths
  function expand_vars
  {
    stamp=$(date +%d%m%Y)

    prefix=.

    conf=$prefix/conf/$host.conf
    key=$prefix/private/$host-$stamp.key
    csr=$prefix/csr/$host-$stamp.csr
  }

  #Print usage help
  function usage
  {
  cat<<eof

  $0 <hostname>

    Generate new key and csr for <hostname>

    Files:
    $conf
    $key
    $csr
  eof
  }

  if [[ $# -ne 1 ]]
  then
    #Set host to a format that lends itself for the usage()-text
    host="<hostname>"
    expand_vars
    usage
    exit 1
  fi

  host="$1"
  expand_vars

  if [[ ! -r $conf ]]
  then
    echo "Cannot read config file $conf"
    echo "Please make a symlink in ./conf to $conf"
    exit 1
  fi

  for f in $key $csr
  do
    if [[ -a $f ]]
    then
      echo "$f exist! Please move/delete before attempting to generate new cert"
      exit 1
    fi
  done

  echo "Warning: Generating *new* key -- manually create cert if this is not what you want!"

  openssl req -config $conf -keyout $key -new -out $csr

  #This is in conf/example.com.conf
  [ req ]
  default_bits = 4096
  prompt = no
  encrypt_key = yes
  default_md = sha1
  distinguished_name = dn
  utf-8 = yes

  [ dn ]
  C = EX #Company code
  O = Organization Name
  CN = example.com
  ST = State
  L = City
  [email protected]