Skip to content
Helpers I use to handle my ssl/tls certs
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Type Name Latest commit message Commit time
Failed to load latest commit information.

Here are my scripts I like to use to manage SSL/TLS certs.

Note scripts that use the crt file depend on you having gone through the process to get your crt to use with these scripts. If you're starting from scratch:

  1. Make your private key.
  2. Make your Certificate Signing Request (CSR) using the key.
  3. Submit the CSR to whomever you're getting your certificate from.
  4. Go through whatever the SSL/TLS vendor's process is and get your Certificate (CRT).
  5. Many users will be happy with their key and crt files. Some will need to combine the crt with bundled chained certs. There are various helper scripts that'll get you to convert the certificates to various formats.


These are provided as-is. Hence, if they set your house on fire (etc), then I guess you did it to yourself? I use most of these scripts for my production context, but I can't guarantee anything. The MS-oriented ones I haven't really fully tested. I learn as I go. Good luck. ^_^

This is a one-shot that'll make both a private key and a self-signed SSL certificate for you. This is nice because you can get SSL for free. But it sucks because it's self-signed SSL that will make most browsers have a minor panic-attack and send users running away. But, for development contexts, etc, it's handy to have. Use it like:
This invokation would create and

Makes your private key. It only really needs to be called when you're first setting things up.

Creates a CSR, using your private key

Makes a combined crt from what's given by the SSL/TLS vendor I tend to use (optional)

Concatenates your crt and private key files to make a pem. According to some dude on the Internet, some MS-like services won't let you provide the private key separately, so... Yeah.. That's "cool". Theoretically, this helps there.

Concatenates your crt and private key files to make a pfx.
You can’t perform that action at this time.