Some articles here about how to generate CA certs using OpenSSL.