-------------------------------------------------------------------------------

cd /etc/httpd/conf
ls ssl*


# generate the public/private KEY
openssl genrsa -out ssl.key/pneumonia.org.au.key 2048

# generate a CSR
openssl req -new \
        -key ssl.key/pneumonia.org.au.key \
        -out ssl.csr/pneumonia.org.au.csr

  Country:  AU
  State:    Queensland
  Locality: Brisbane
  Company:  Griffith University
  OrgUnit:  ICTS
  Server:   pneumonia.org.au
  EMail:    {blank}
  Password: {blank}
  Optional: {blank}


# Check the CSR
# # ?????

# send this to Jeff for offical signing -- OR

# Self-signed CRT
openssl x509 -req -days 900 \
        -in      ssl.csr/pneumonia.org.au.csr \
        -signkey ssl.key/pneumonia.org.au.key \
        -out     ssl.crt/pneumonia.org.au.crt


# set location in SSL conf (key and crt only)
vi /etc/httpd/conf.d/ssl.conf


-------------------------------------------------------------------------------