certify is a small selection of useful utilities for manipulating X509 certificates and public keys. It uses the mirleft organization's x509, tls, and nocrypto libraries.
Three subcommands to
certify are provided:
certify csr: make a certificate signing request
certify selfsign: make a self-signed certificate
certify sign: sign a certificate
Published: 17 Jul 2021
A very small utility for common certificate operations using ocaml-x509 and ocaml-nocrypto for key generation. Intended as a (non-drop-in) replacement for these uses of the command-line
certify is now available in
opam, a free source-based package manager for OCaml. You can install
certify via opam with
opam install certify.
Outside of opam:
git clone https://github.com/yomimono/ocaml-certify dune build
certify binary will be in
_build/default/install/bin, and you can install it wherever you like, or just use it in place.
For help, try
certify selfsign --help,
certify sign --help, or
certify csr --help.
certify selfsignproduces a private key and self-signed certificate
certify signtakes a certificate signing request, and a CA (key and certificate), and produces a certificate
certify csrproduces a private key and a certificate signing request
openssl interoperability tests are in