ca.conf</code>: the configuration for <code>openssl</code> to generate the root certificate</li><li><code>root-cert.csr</code>: the generated CSR for the root certificate</li></ul></li><li><p>Generate an intermediate certificate and key:</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ make -f ../tools/certs/Makefile.selfsigned.mk cluster1-cacerts
</code></pre><p>This will generate the following files in a directory named <code>cluster1</code>:</p><ul><li><code>ca-cert.pem</code>: t