<em class="replaceable"><code>dbhost.yourdomain.com</code></em> with the
     server's host name:
</p><pre class="programlisting">
openssl req -new -x509 -days 365 -nodes -text -out server.crt \
  -keyout server.key -subj "/CN=<em class="replaceable"><code>dbhost.yourdomain.com</code></em>"
</pre><p>
    Then do:
</p><pre class="programlisting">
chmod og-rwx server.key
</pre><p>
    because the server will reject the file if its permissions are more
    liberal than this.
    For more details on how to crea