This script can replace the copies of mkkey.sh sprinkled all over the tree. It prompts nicely for passwords, avoids writing the raw private key to disk, and always generates certs that use sha1WithRSAEncryption.
