package certify
Install
Dune Dependency
Authors
Maintainers
Sources
sha256=86252719dcbb7af84589727193663b7c082ceaaa5c4382faae383952fb2e8459
sha512=fa15cca647ecc14c6efd17fdb4609cb1987826d515bf7c96e0aff34f8ade0c114aaf9e0f47c8d16bb29c358445884fe5e82b2d260140517c0ffb893a7e55937f
Description
certify
is a small selection of useful utilities for manipulating X509 certificates and public keys. It uses the mirleft organization's x509, tls, and nocrypto libraries.
Three subcommands to certify
are provided:
certify csr
: make a certificate signing requestcertify selfsign
: make a self-signed certificatecertify sign
: sign a certificate
README
About
A very small utility for common certificate operations using ocaml-x509 and ocaml-nocrypto for key generation. Intended as a (non-drop-in) replacement for these uses of the command-line openssl
utility.
Install
certify
is now available in opam
, a free source-based package manager for OCaml. You can install certify
via opam with opam install certify
.
Outside of opam:
git clone https://github.com/yomimono/ocaml-certify
dune build
The certify
binary will be in _build/default/install/bin
, and you can install it wherever you like, or just use it in place.
Running
For help, try certify selfsign --help
, certify sign --help
, or certify csr --help
.
certify selfsign
produces a private key and self-signed certificatecertify sign
takes a certificate signing request, and a CA (key and certificate), and produces a certificatecertify csr
produces a private key and a certificate signing request
Tests
Simple openssl
interoperability tests are in tests/test.sh
.
Dependencies (8)
-
cmdliner
>= "1.0.0"
-
ocaml
>= "4.07.0"
- ptime
-
cstruct
>= "3.2.0" & < "6.1.0"
-
x509
>= "0.12.1" & < "0.15.1"
-
mirage-crypto-rng
< "0.11.0"
-
mirage-crypto-pk
< "1.0.0"
-
dune
>= "1.0"
Dev Dependencies (1)
-
conf-openssl
with-test
Used by
None
Conflicts
None