Next revision | Previous revision |
module:certtool [2018/02/28 11:40] – created deuce | module:certtool [2024/03/28 12:29] (current) – [See Also] Add link to LetSyncrypt page digital man |
---|
====== Certtool ====== | ====== Certtool - Synchronet Certificate Tool ====== |
| |
This is a small tool to allow creating CSRs and importing certificate chains. This should be usable to obtain | This is a small tool to allow creating CSRs and importing/exporting certificate chains and other files. This should be usable to obtain |
a trusted Let's Encrypt certificate before the ACMEv2 endpoint goes live. After that, it would be much better to use [[module:letsyncrypt|LetSyncrypt]]. | a trusted Let's Encrypt certificate before the ACMEv2 endpoint goes live. After that, it would be much better to use [[module:letsyncrypt|LetSyncrypt]]. |
| |
===== Options ===== | ===== Options ===== |
| |
| ''%%--%%export-pkcs12 <file>'' Exports the current private key and certificate as a PKCS#12 file, encrypted using the system password. File name must end in .p12. |
| |
| ''%%--%%import-pkcs12 <file>'' Imports the current private key and certificate as a PKCS#12 file **OVERWRITING THE CURRENT ONE**, encrypted using the system password. File name must end in .p12. |
| |
''%%--%%csr'' Generates a CSR. | ''%%--%%csr'' Generates a CSR. |
''%%jsexec certtool --csr --domain nix.synchro.net --domain gallery.bbsdev.net --domain pics.bbsdev.net --domain home.bbsdev.net%%'' > csr.pem | ''%%jsexec certtool --csr --domain nix.synchro.net --domain gallery.bbsdev.net --domain pics.bbsdev.net --domain home.bbsdev.net%%'' > csr.pem |
| |
''%%--%%import'' Imports a certificate chain. This must be a single text file with the whole certificate chain in separate contains like this: | ''%%--%%import <file>'' Imports a certificate chain. This must be a single text file with the whole certificate chain in separate contains like this: |
| |
<file> | <file> |
</file> | </file> |
| |
| For example: |
| jsexec certtool --import /tmp/le.cert |
===== See Also ===== | ===== See Also ===== |
* [[:module:|module index]] | * [[:module:|module index]] |
| * [[LetSyncrypt]] |
| |
{{tag>}} | {{tag>jsutil letsencrypt tls ssl crypt}} |
| |