#!/usr/bin/env bash
set -euo pipefail
mkdir -p ca
openssl genrsa -out ca/root.key 4096
openssl req -x509 -new -nodes -key ca/root.key -sha256 -days 3650 -subj "/CN=Spectra Root CA" -out ca/root.crt
echo "Root CA in ca/root.crt"