openssl req -x509 -newkey rsa:2048 -keyout ca.key -out ca.crt -days 3650
openssl req -new -newkey rsa:2048 -nodes -keyout server.key -out server.csr -days 3650
openssl x509 -req -in server.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out server.crt -days 3650 -sha256
openssl req -new -newkey rsa:2048 -nodes -keyout client.key -out client.csr -days 3650
openssl x509 -req -in client.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out client.crt -days 3650 -sha256
openssl dhparam -out dhparam.pem 2048