Small command-line tool for making certificates with OCaml x509/nocrypto toolstack.
OCaml Makefile
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Failed to load latest commit information.
src
.gitignore
LICENSE.md
Makefile
README.md
_oasis
_tags
configure
myocamlbuild.ml
opam
setup.ml

README.md

About

A very small utility for making self-signed certificates and private keys using ocaml-x509 and ocaml-nocrypto for key generation. Intended as a (non-drop-in) replacement for these uses of the command-line openssl utility.

Dependencies

certify depends on cmdliner, x509, and nocrypto. To install these packages via opam:

opam install nocrypto x509 cmdliner

Install

To install with opam:

opam pin add certify https://github.com/yomimono/ocaml-certify.git
opam install certify

Outside of opam:

git clone https://github.com/yomimono/ocaml-certify
cd ocaml-certify
./configure
make
make install

Running

For help, try selfsign --help, sign --help, or csr --help.

  • selfsign produces a private key and self-signed certificate
  • sign takes a certificate signing request, and a CA (key and certificate), and produces a certificate
  • csr produces a private key and a certificate signing request