Quick and easy X.509 certificate generator for SSL/TLS utilizing local PKI
Project description
quickcerts
Quick and easy X.509 certificate generator for SSL/TLS utilizing local PKI
Features
- Easy to use.
- Genarates both client and server certificates.
- Produces certificates with proper attributes (Key Usage, Extended Key Usage, Authority Key Identifier, Subject Key Identifier and so on).
- Supports certificates with multiple domain names (SAN, SubjectAlternativeName).
- Supports wildcard certificates.
Requirements
- Python 3.4+
- cryptography 1.6+
Installation
pip3 install quickcerts
For deployment with Docker see "Docker" section below.
Usage example
quickcerts -D *.example.com example.com -D www.example2.com example2.com mx.example2.com -C "John Doe" -C "Jane Doe"
This command will produce following files in current directory:
- CA certificate and key
- Two server certificates having multiple DNS names in SubjectAlternativeName fields and keys for that certificates.
- Two client certificates for CN="John Doe" and CN="Jane Doe" (and keys for them).
Consequent invokations will reuse created CA.
Docker
Also you may run this application with Docker:
docker run -it --rm -v "$(pwd)/certs:/certs" \
yarmak/quickcerts -D server -C client1 -C client2 -C client3
In this example CA and certificates will be created in ./certs
directory.
Synopsis
$ quickcerts --help
usage: quickcerts [-h] [-o OUTPUT_DIR] [-k KEY_SIZE]
[-D DOMAINS [DOMAINS ...]] [-C CLIENT]
Generate RSA certificates signed by common self-signed CA
optional arguments:
-h, --help show this help message and exit
-o OUTPUT_DIR, --output-dir OUTPUT_DIR
location of certificates output (default: .)
-k KEY_SIZE, --key-size KEY_SIZE
RSA key size used for all certificates (default: 2048)
-D DOMAINS [DOMAINS ...], --domains DOMAINS [DOMAINS ...]
Generate server certificate which covers following
domains delimited by spaces. First one will be set as
CN. Option can be used multiple times. (default: None)
-C CLIENT, --client CLIENT
Generate client certificate with following name.
(default: None)
Project details
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
quickcerts-0.2.1.tar.gz
(4.7 kB
view hashes)
Built Distribution
Close
Hashes for quickcerts-0.2.1-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | 106e21377e1e46405df9b36e921d7fcac72d8a47157ade7d070d1afc38387764 |
|
MD5 | 686d34aedb444f6ff20646bb71c210ea |
|
BLAKE2b-256 | 854a61fc36e2345aee3369871456035aa5f53e461dcd69ab8898fe126be27320 |