ssl certificate

Not sure if this is optimal, but here goes

create CA using CA.pl -newcert
Then use CA.pl -newreq for the certificate itself. In here instead of your name use the host that will be serving the certificate. Unfortunately the software does not give this hint.

Then CA.pl -sign to sign the certificate with the authority

Then use the -rsa option to get a clear text version that will allow the webserver to restart without prompting for the password.