gX# openssl dsaparam -rand -genkey -out rand.key 1024

gX# openssl gendsa -des3 -out ca.key rand.key
Generating DSA key, 1024 bits
Enter PEM pass phrase:Pa$$w0rd
Verifying - Enter PEM pass phrase:Pa$$w0rd

gX# rm rand.key

gX# openssl req -new -x509 -days 365 -key ca.key -out ca.crt
Enter pass phrase for ca.key:Pa$$w0rd
...
Country Name (2 letter code) [AU]:RU
State or Province Name (full name) [Some-State]:Russia
Locality Name (eg, city) []:Moscow
Organization Name (eg, company) [Internet Widgits Pty Ltd]:cko
Organizational Unit Name (eg, section) []:unix3
Common Name (eg, YOUR name) []:dX.class
Email Address []:root@gX.dX.class

Приватный ключ apache.key оставляем старый

gX# rm apache.crt

gX# openssl req -new -days 365 -key apache.key -out apache.req
...
Country Name (2 letter code) [AU]:RU
State or Province Name (full name) [Some-State]:Russia
Locality Name (eg, city) []:Moscow
Organization Name (eg, company) [Internet Widgits Pty Ltd]:cko
Organizational Unit Name (eg, section) []:unix3
Common Name (eg, YOUR name) []:gX.dX.class
Email Address []:root@gX.dX.class

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:

gX# openssl x509 -req -in apache.req -CA ca.crt -CAkey ca.key -CAcreateserial -out apache.crt
Signature ok
subject=/C=RU/ST=Russia/L=Moskw/O=cko/OU=freebsd/CN=dX.class/emailAddress=root@gX.dX.class
Getting CA Private Key
Enter pass phrase for ca.key:

gX# rm apache.req