Crates.io | self-signed-cert |
lib.rs | self-signed-cert |
version | 1.0.3 |
source | src |
created_at | 2024-02-20 20:51:52.618112 |
updated_at | 2024-04-09 02:37:41.992493 |
description | Tool to generate self-signed root CA, web server certs and keys |
homepage | |
repository | |
max_upload_size | |
id | 1146908 |
size | 33,820 |
A command line tool to generate self-signed web server TLS certificates, for use in testing.
self-signed-cert
generates the four (4) files needed to test a single
client/server scenario:
Optionally, the server cert request (CSR) may also be generated.
Many options exist to tweak certificate settings. All CLI options are optional. The program designed to do the right thing by default, with zero configuration.
$ self-signed-cert
$ ls *.pem
ca-cert.pem ca-key.pem server-cert.pem server-key.pem
The CLI interface is described via --help
:
$ cargo run -- --help
Tool to generate self-signed root CA, web server certs and keys
Usage: self-signed-cert [OPTIONS]
Options:
-o, --out-dir <OUT_DIR>
Output directory for PEM files [default: .]
--out-zip <OUT_ZIP>
If present, send output to a single zipfile OUT_ZIP
--ca-key-out <CA_KEY_OUT>
root CA private key output path [default: ca-key.pem]
--ca-cert-out <CA_CERT_OUT>
root CA cert output path [default: ca-cert.pem]
--key-out <KEY_OUT>
server private key output path [default: server-key.pem]
--csr-out <CSR_OUT>
server cert signing request output path
--cert-out <CERT_OUT>
server cert output path [default: server-cert.pem]
--srv-common-name <SRV_COMMON_NAME>
Server cert: common name [default: 127.0.0.1]
--srv-country <SRV_COUNTRY>
Server cert: country code [default: US]
--srv-state <SRV_STATE>
Server cert: state or province
--srv-city <SRV_CITY>
Server cert: city or locality
--srv-org <SRV_ORG>
Server cert: organization
--srv-expire <SRV_EXPIRE>
Server cert: days until expiration [default: 365]
--ca-common-name <CA_COMMON_NAME>
CA cert: common name [default: 127.0.0.1]
--ca-country <CA_COUNTRY>
CA cert: country code [default: US]
--ca-state <CA_STATE>
CA cert: state or province
--ca-city <CA_CITY>
CA cert: city or locality
--ca-org <CA_ORG>
CA cert: organization
--ca-expire <CA_EXPIRE>
CA cert: days until expiration [default: 365]
--common-name <COMMON_NAME>
common name: Default set for both CA and server certs
--country <COUNTRY>
country code: Default set for both CA and server certs
--state <STATE>
state or province: Default set for both CA and server certs
--city <CITY>
city or locality: Default set for both CA and server certs
--org <ORG>
organization: Default set for both CA and server certs
--expire <EXPIRE>
expire days: Default set for both CA and server certs
-h, --help
Print help
-V, --version
Print version