openssl req -x509 -nodes -days 900 -newkey rsa:2048 -keyout server.key -out server.crt
openssl x509 -x509toreq -in server.crt -out server.csr -signkey server.key
openssl x509 -x509toreq -in server.crt -out server.csr -signkey server.key
This will generate the 3 SSL key files needed for Lithium 5 in the CWD.
Stop Lithium using the the Core Admin App
Move these files to /Library/Application Support/Lithium/ClientService/Resources/ssl