How do you create a private key for a CA (certificate authority)?

Difficulty: unrated

Source: bregman-arie/devops-exercises by Arie Bregman

Answer

One way is using openssl this way:

openssl genrsa -aes256 -out ca-private-key.pem 4096