Modern OpenSSL no longer has the 2038 year restriction. Update the certs to last 500 years rather than 10 years. Modern crypto requirements suggest a stronger key strength than 1024. Update to use a minimum of 4096. Fix executable bit on gen-req.sh
Fedora/RedHat OpenSSL supports only P-256, P-384 and P-521. The new mkcert.sh script can create updated certs when these expire on Jan 17th 2038.