OpenSSL

Self signed certificate

openssl genrsa 2048 > /etc/ssl/private/`hostname`.key
chmod 640 /etc/ssl/private/`hostname`.key
chown root:ssl-cert /etc/ssl/private/`hostname`.key
openssl req -new -key /etc/ssl/private/`hostname`.key -x509 -days 9999 -out /etc/ssl/certs/`hostname`.cert

Own CA (Certification Authority)

Without phass phrase to use with daemons

vi /etc/ssl/openssl.cnf
cd /srv
/usr/lib/ssl/misc/CA.pl -newca
vi /etc/ssl/openssl.cnf
mkdir /etc/ssl/`hostname`
cd /etc/ssl/`hostname`
/usr/lib/ssl/misc/CA.pl -newreq-nodes
/usr/lib/ssl/misc/CA.pl -signreq