generate_openssl_selfsigned_certificate.sh

#! /bin/bash
# Copy paste from original SSH3 repository
# we strongly recommend using classical certificates through e.g. letencrypt
# however, if you want a comparable security level to OpenSSH's host keys,
# you can use this script to generate a self-signed certificate for every host
# and every IP address to install on your server
openssl req -x509 -sha256 -nodes -newkey rsa:4096 -keyout priv.key -days 3660 -out cert.pem -subj "/C=XX/O=Default Company/OU=XX/CN=selfsigned.ssh3" -addext "subjectAltName = DNS:selfsigned.ssh3,DNS:*"