sysca 1.2

Certificate tool for Sysadmins

Description

Easy-to-use command-line tool for certificate management.

Features

• Simple command-line UI.

• Good defaults, sets up common extensions automatically.

• PGP- and password-protected private keys.

• OCSP and CRL info settings.

• Supports both EC and RSA keys.

Dependencies

• Python cryptography module (version >= 2.1).

• (Optional) gpg command-line tool to decrypt files.

• (Optional) openssl command-line tool to show CRT/CSR contents.

Summary

Generate new key:

sysca new-key              [--password-file TXT_FILE] [--out DST]
sysca new-key ec[:<curve>] [--password-file TXT_FILE] [--out DST]
sysca new-key rsa[:<bits>] [--password-file TXT_FILE] [--out DST]

Create certificate signing request:

sysca request --key KEY_FILE [--password-file TXT_FILE]
              [--subject DN] [--san ALTNAMES]
              [--CA] [--path-length DEPTH]
              [--usage FLAGS] [--ocsp-url URLS] [--crl-url URLS]
              [--issuer-cert-url URLS]
              [--out CSR_FN]

Create selfsigned certificate:

sysca selfsign --key KEY_FILE --days N [--password-file TXT_FILE]
              [--subject DN] [--san ALTNAMES]
              [--CA] [--path-length DEPTH]
              [--usage FLAGS] [--ocsp-url URLS] [--crl-url URLS]
              [--issuer-cert-url URLS]
              [--out CRT_FN]

Sign certificate signing request:

sysca sign --ca-key KEY_FILE --ca-info CRT_FILE
           --request CSR_FILE --days NUM
           [--out CRT_FN] [--password-file TXT_FILE]
           [--reset ...]

Change CRL file:

sysca update-crl --crl CRL_FILE --ca-key KEY_FILE --ca-info CRT_FILE
           --days NUM [--out CRT_FN] [--password-file TXT_FILE]
           [--reason REASON_NAME]
           [--revoke-cert CERT_FILE] ...
           [--revoke-serial SERIAL] ...
           [--crl-number NUM] [--delta-crl-number NUM]

Display contents of CSR or CRT file:

sysca show FILE