Command to generate a new keystore with a selfsign certificate:

> keytool -genkeypair -alias innova-ssl-cert -keyalg RSA -keysize 2048 -storetype PKCS12 -keystore keystore.p12 -validity 3650 -storepass nova#123 -keypass nova#123 -dname "CN=localhost, OU=Dev, O=NOVA, L=Lisbon, S=Lisbon, C=PT"

Para exportar o *.crt e *.key, para usar no servidor httpd ou revers-proxy:

# Extract key and cert from keystore.p12
> openssl pkcs12 -in keystore.p12 -nokeys -out nova_dev.crt
> openssl pkcs12 -in keystore.p12 -nocerts -nodes -out nova_dev.key
