Apache and OpenSSL (Debian, FreeBSD)

$ openssl genrsa -des3 -out ca.key 1024
$ ls ca.key
$ openssl req -new -x509 -days 365 -key ca.key -out ca.crt
Country Name (2 letter code) [AU]: NO
State or Province Name (full name) [Some-State]: Trondheim
Locality Name (eg, city) []: Trondheim
Organization Name (eg, company) [Internet Widgits Pty Ltd]: khmel.org
Organization Unit Name (eg, section) []: khmel.org
Common Name (eg, YOUR name) []: khmel.org
Email Address []: test@khmel.org
ls ca.crt
mkdir /etc/ssl_keys/
chmod 0600 /etc/ssl_keys/
cp ca.key /etc/ssl_keys/ca.key
cp ca.crt /etc/ssl_keys/ca.crt

cd /etc/apache2/mods-available/
cp ssl.conf /etc/apache2/mods-enabled/ssl.conf
cp ssl.load /etc/apache2/mods-enabled/ssl.load

NameVirtualHost 192.168.1.1:443
<VirtualHost 192.168.1.1:443>
SSLEngine on
SSLCertificateFile /etc/ssl_keys/ca.crt
SSLCertificateKeyFile /etc/ssl_keys/ca.key
ServerName 192.168.1.1
DocumentRoot /var/www/
</VirtualHost>

Listen 443

cd /etc/ssl_keys/
cp ca.key ca.key.org
openssl rsa -in ca.key.org -out ca.key
chmod 400 ca.key