certainly
Handy simple tool for common certificate-related operations.
|
Install
Binary download (Windows, Linux, macOS)
Binaries are available through GitHub Releases.
From source
With Cargo: cargo install certainly
From package manager
Arch Linux (AUR)
yay -S certainly-bin
Debian, Ubuntu (deb)
Download the deb file from GitHub Releases.
Others
Accepting contributions for more!
Options
-
--std
and--reverse-std
will output both key and certificate to STDOUT instead of writing files. -
--double-std
will output the key to STDERR and the certificate to STDOUT instead, so redirection can be used to write or pipe files where needed efficiently. Take care of checking the key is actually formatted properly and not an error message though! -
--inspect
outputs terse information about the passed certificate file (or url) and exits. -
--make-ca
creates a key/certificate pair suitable for issuing instead. Use with--ca
. -
--ca NAME
signs a certificate with a CA pair instead of self-signing. Provide only the common filename, without the.crt
and.key
extensions. -
--client
creates client certificates rather than server ones. -
--ecdsa
creates p256r1 ECDSA certificates (default). -
--ed25519
creates ED25519 certificates. -
--rsa
creates 4096-bit RSA certificates (not for production use).
See the man page for more.
See also
- mkcert, a tool specifically for local-CA certificate management.
Etc
- Copyright © Félix Saparelli.
- Licensed under the Artistic License 2.0.