That's the right command - did you create the cert from the stripped key? I'm just copy/pasting out of the script I have for this, since I forget every year what the commands are
Code:
echo "Generating key with passphrase - passphrase is removed later"
/usr/bin/openssl genrsa -des3 -out server 1024
echo "Removing passphrase"
/usr/bin/openssl rsa -in server -out server.key
echo "Remove temp file and set permissions"
/usr/bin/rm -f server
/usr/bin/chmod 0400 server.key
echo "Create the cert"
/usr/bin/openssl req -new -key server.key -x509 -days 365 -out server.crt
/usr/bin/chmod 0400 server.crt
I hope that helps...