Quick and easy X.509 certificate generator for SSL/TLS utilizing local PKI
Project description
quickcerts
Quick and easy X.509 certificate generator for SSL/TLS utilizing local PKI
Features
- Easy to use.
- Genarates both client and server certificates.
- Produces certificates with proper attributes (Key Usage, Extended Key Usage, Authority Key Identifier, Subject Key Identifier and so on).
- Supports certificates with multiple domain names (SAN, SubjectAlternativeName).
- Supports wildcard certificates.
Requirements
- Python 3.4+
- cryptography 1.6+
Installation
pip3 install quickcerts
Usage example
quickcerts -D *.example.com example.com -D www.example2.com example2.com mx.example2.com -C "John Doe" -C "Jane Doe"
This command will produce following files in current directory:
- CA certificate and key
- Two server certificates having multiple DNS names in SubjectAlternativeName fields and keys for that certificates.
- Two client certificates for CN="John Doe" and CN="Jane Doe" (and keys for them).
Consequent invokations will reuse created CA.
Synopsis
$ quickcerts --help
usage: quickcerts [-h] [-o OUTPUT_DIR] [-k KEY_SIZE]
[-D DOMAINS [DOMAINS ...]] [-C CLIENT]
Generate RSA certificates signed by common self-signed CA
optional arguments:
-h, --help show this help message and exit
-o OUTPUT_DIR, --output-dir OUTPUT_DIR
location of certificates output (default: .)
-k KEY_SIZE, --key-size KEY_SIZE
RSA key size used for all certificates (default: 2048)
-D DOMAINS [DOMAINS ...], --domains DOMAINS [DOMAINS ...]
Generate server certificate which covers following
domains delimited by spaces. First one will be set as
CN. Option can be used multiple times. (default: None)
-C CLIENT, --client CLIENT
Generate client certificate with following name.
(default: None)
Project details
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
quickcerts-0.2.0.tar.gz
(4.6 kB
view hashes)
Built Distribution
Close
Hashes for quickcerts-0.2.0-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | 03e29daa7d2a6ab7585fd189879d2f01c792c059fc692bb0b85f41d6e5bd5b11 |
|
MD5 | 96298836208ca78382f623fdc72bb448 |
|
BLAKE2b-256 | 795117fbd92a0ab4362e6e718bf6a0edb0d336d112f1ec84b50f90588820d1a5 |