Self-signed root certificate (ca.crt) for rancher-agent and server?

[kaos]

@joeblackwaslike, the link from @smaccona is better (as it details all the steps to take to actually get it to a working state).