Ben's notes

yum install openssl-perl

/etc/pki/tls/misc/CA.pl -newca

/etc/pki/tls/misc/CA.pl -newreq

/etc/pki/tls/misc/CA.pl -signreq

/etc/pki/tls/misc/CA.pl -pkcs12 "My Test Certificate"

openssl pkcs12 -nocerts -in mycert.p12 -out userkey.pem
openssl pkcs12 -clcerts -nokeys -in mycert.p12 -out usercert.pem

openssl x509 -in cacert.pem -out cacert.crt
cp cacert.crt /etc/pki/ca-trust/source/anchors/
update-ca-trust

openssl verify -purpose sslserver -CAfile /etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt client.crt