cd /etc/ssl/certs
PATH=$PATH:/usr/bin/ssl
if [ -f "$cert.pem" ]; then
echo "You already have /etc/ssl/certs/$cert.pem"
else
echo "Creating generic self-signed certificate: /etc/ssl/certs/$cert.pem"
echo "(replace with hand-crafted or authorized one if needed)."
HOSTNAME=`hostname -s`
FQDN=`hostname -f`
MAILNAME=`cat /etc/mailname 2> /dev/null || hostname -f`
openssl req -new -x509 -days 365 -nodes -out "$cert.pem" -keyout "$cert.pem" > /dev/null 2>&1 <<+
.
.
.
$description
$HOSTNAME
$FQDN
root@$MAILNAME
+
ln -sf "$cert.pem" `openssl x509 -noout -hash < "$cert.pem"`.0
chown root:root "/etc/ssl/certs/$cert.pem"
chmod 0640 "/etc/ssl/certs/$cert.pem"
fi

exit 0