#!/bin/bash # =========================================================== # create a client's private key # ----------------------------------------------------------- # do not encrypt it with AES256 - this way you will no need # to enter a pass phrase every time # =========================================================== openssl genrsa -out keys/xxxx.key.pem 2048