Debian’s predictable random number generator bug in OpenSSL saw me regenerating SSH and TLS keys. I almost always have to look up how to use openssl for certificate generation, so I improved my tiny personal certificate authority setup with a makefile, similar to the one used in this howto by Jeremy Mates.