keytool -genkey -keyalg RSA -keysize 2048 -keystore serverkey.pem -validity 1100 -dname "CN=SERVERNAME, O=Jihoceska univerzita v Ceskych Budejovicich, C=CZ" -keypass PASSWORD -alias SERVERALIAS
keytool -certreq -keyalg RSA -file request.csr -keystore serverkey.pem -alias SERVERALIAS
Submit request at http://tcs.cesnet.cz/req and download keys.
Generate no password key
openssl rsa -in serverkey.pem -out serverkey_nopass.pem
Copy keys
cp serverkey_nopass.pem /etc/ssl/private/
cp servercert.pem /etc/ssl/private/
Edit apache2 conf /etc/apache2/sites-enabled/000-default-ssl
SSLEngine on
SSLCertificateFile /etc/ssl/certs/servercert.pem
SSLCertificateKeyFile /etc/ssl/private/serverkey_nopass.pem
