Setting up private key and public cert

Create the private key file; run: 
openssl genrsa -out server.key 2048

Create and sign public cert; run:
openssl req -new -key server.key \ 
-config openssl.cnf -extensions usr_cert \ 
-days 3650 -x509 -out server.crt

Create a pem file:
cp server.key /etc/bacula/server.pem
cat server.crt >> /etc/bacula/server.pem
chmod 700 /etc/bacula/server.pem