certify

CLI utilities for simple X509 certificate manipulation
README

A very small utility for common certificate operations using ocaml-x509 and ocaml-nocrypto for key generation. Intended as a (non-drop-in) replacement for these uses of the command-line openssl utility.

Install

certify is now available in opam, a free source-based package manager for OCaml. You can install certify via opam with opam install certify.

Outside of opam:

git clone https://github.com/yomimono/ocaml-certify
dune build

The certify binary will be in _build/default/install/bin, and you can install it wherever you like, or just use it in place.

Running

For help, try certify selfsign --help, certify sign --help, or certify csr --help.

  • certify selfsign produces a private key and self-signed certificate

  • certify sign takes a certificate signing request, and a CA (key and certificate), and produces a certificate

  • certify csr produces a private key and a certificate signing request

Tests

Simple openssl interoperability tests are in tests/test.sh.

Install
Published
17 Jul 2021
Sources
certify-v0.3.3.tbz
sha256=86252719dcbb7af84589727193663b7c082ceaaa5c4382faae383952fb2e8459
sha512=fa15cca647ecc14c6efd17fdb4609cb1987826d515bf7c96e0aff34f8ade0c114aaf9e0f47c8d16bb29c358445884fe5e82b2d260140517c0ffb893a7e55937f
Dependencies
conf-openssl
with-test
cmdliner
>= "1.0.0"
ocaml
>= "4.07.0"
cstruct
>= "3.2.0" & < "6.1.0"
x509
>= "0.12.1" & < "0.15.1"
dune
>= "1.0"
Reverse Dependencies