mkdir certs
rm certs/*

# CA key and cert
openssl genrsa -out certs/ca.key 2048
openssl req -new -key certs/ca.key -out certs/ca.csr
openssl x509 -req -in certs/ca.csr -out certs/ca.pem -signkey certs/ca.key -CAcreateserial -days 36500

# for tls server
openssl genrsa -out certs/server.key 2048
openssl req -new -key certs/server.key -out certs/server.csr
openssl x509 -req -in certs/server.csr -out certs/server.pem -signkey certs/server.key -CA certs/ca.pem -CAkey certs/ca.key -CAcreateserial -days 36500

# for tls client
openssl genrsa -out certs/client.key 2048
openssl req -new -key certs/client.key -out certs/client.csr
openssl x509 -req -in certs/client.csr -out certs/client.pem -signkey certs/client.key -CA certs/ca.pem -CAkey certs/ca.key -CAcreateserial -days 36500

cp client_example.json client.json

cp server_example.json server.json