The elog program wants a server.crt and server.key file. We can make both with the Makefile in /etc/pki/tls/certs. However, these files will have a passphrase on them. This is bad because we want the elog program to start automatically at boot. If a passphrase is required, this won’t work. So we need to take the passphrase off.
make server.key
mv server.key server.key.withpassphrase
openssl rsa -in server.key.withpassphrase -out server.key
make server.crt