I believe that the following command should do what you need. It's not described in detail in the openssl docs (that I could see), but if you RTFM the docs for related packages, it soon becomes apparent. openssl req -new -x509 -nodes -out <cert name>.pem -keyout <cert name>.pem \ -days 999 Anybody else know of a better way? -- ____________________________________________________________________________ Sean T. O'Connor http://www.uiuc.edu/~stoconno ---------------------------------------------------------------------------- ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]