package certify

  1. Overview
  2. Docs
CLI utilities for simple X509 certificate manipulation

Install 

dune-project
 Dependency

github.com Readme Changelog License Edit opam file Versions (5)

Authors

  1. M
    Mindy Preston

Maintainers

  1. M
    maintenance@identity-function.com

Sources

certify-v0.3.1.tbz
sha256=35a9492d13d90f6e6c1720a38fb210af9c1d09f3d231bbb5518714fcbd9ca24e
sha512=dafbdfbafe8b6fa77599a03ce98d3139dbe39831b3a34466cbb5fb4a3a48004f19184b12d426908f4d28d5751b3c6e41aa45188bddc0f5d956d66b7ba3e49178

Description

certify is a small selection of useful utilities for manipulating X509 certificates and public keys. It uses the mirleft organization's x509, tls, and nocrypto libraries.

Three subcommands to certify are provided:

  • certify csr: make a certificate signing request
  • certify selfsign: make a self-signed certificate
  • certify sign: sign a certificate

Tags

org:mirage

Published: 30 Sep 2019

README

About

A very small utility for common certificate operations using ocaml-x509 and ocaml-nocrypto for key generation. Intended as a (non-drop-in) replacement for these uses of the command-line openssl utility.

Install

certify is now available in opam, a free source-based package manager for OCaml. You can install certify via opam with opam install certify.

Outside of opam:

git clone https://github.com/yomimono/ocaml-certify
dune build

The certify binary will be in _build/default/install/bin, and you can install it wherever you like, or just use it in place.

Running

For help, try certify selfsign --help, certify sign --help, or certify csr --help.

  • certify selfsign produces a private key and self-signed certificate
  • certify sign takes a certificate signing request, and a CA (key and certificate), and produces a certificate
  • certify csr produces a private key and a certificate signing request

Tests

Simple openssl interoperability tests are in tests/test.sh.

Dependencies (7)

  1. cmdliner >= "1.0.0" & < "2.0.0"
  2. ocaml >= "4.04.2"
  3. ptime
  4. cstruct >= "3.2.0"
  5. x509 = "0.7.1"
  6. nocrypto >= "0.5.4"
  7. dune >= "1.0"

Dev Dependencies (1)

  1. conf-openssl with-test

Used by

None

Conflicts

None