#/usr/local/ssl/bin/openssl req -new -x509 -days 3650 -nodes -out stunnel.pem -keyout stunnel.pem -config stunnel.cnf 
#/usr/local/ssl/bin/openssl x509 -subject -dates -fingerprint -noout -in stunnel.pem 

# create RSA certs - Server

#RANDFILE = stunnel.rnd

[ req ]
default_bits = 1024
encrypt_key = yes
distinguished_name = req_dn
x509_extensions = cert_type

[ req_dn ]
countryName = Country Name (2 letter code)
countryName_default             = US
countryName_min                 = 2
countryName_max                 = 2

stateOrProvinceName             = State or Province Name (full name)
stateOrProvinceName_default     = <ENTER YOUR STATE OR PROVINCE: i.e. Virginia>

localityName                    = Locality Name (eg, city)
localityName_default		= <ENTER YOUR CITY: i.e. Fairfax City>

0.organizationName              = Organization Name (eg, company)
0.organizationName_default      = <ENTER YOUR ORG NAME HERE: i.e. Peregrine Hardware, Inc.>

organizationalUnitName          = Organizational Unit Name (eg, section)
#organizationalUnitName_default =

0.commonName                    = Common Name (FQDN of your server)
0.commonName_value              = <ENTER THE COMPUTER NAME HERE: i.e. intel1.peregrinehw.com>

[ cert_type ]
nsCertType = server