openssl genrsa -out /etc/ssl/private/web-proxy.key 2048

sitename=pve4.mosigra.su
openssl req -new -key /etc/ssl/private/web-proxy.key -out $sitename.csr -subj /C=RU/L=Moscow/CN=$sitename
openssl x509 -req -days 365 -in $sitename.csr -signkey /etc/ssl/private/web-proxy.key -out /etc/ssl/certs/$sitename.crt
rm $sitename.csr