It turned out pretty simple. See references to redhat at:
http://www.redhat.com/docs/manuals/linux/RHL-9-Manual/custom-guide/s1-secureserver-generatingkey.html
Or do the following:
/ usr / bin / openssl genrsa 1024> / etc / httpd / conf / ssl.key / server.key
chmod go-rwx / etc / httpd / conf / ssl.key / server.key
umask 77; \
/ usr / bin / openssl req-new-key / etc / httpd / conf / ssl.key / server.key-out / etc / httpd / conf / ssl.csr / server.csr
umask 77; \
/ usr / bin / openssl req-new-key / etc / httpd / conf / ssl.key / server.key-x509-days 365-out / etc / httpd / conf / ssl.crt / server.crt
That's it.
