Synchronet v3.19b-Win32 (install) has been released (Jan-2022).

You can donate to the Synchronet project using PayPal.

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision
Previous revision
module:certtool [2018/02/28 11:40] – created deucemodule:certtool [2024/03/28 12:29] (current) – [See Also] Add link to LetSyncrypt page digital man
Line 1: Line 1:
-====== Certtool ======+====== Certtool - Synchronet Certificate Tool ======
  
-This is a small tool to allow creating CSRs and importing certificate chains.  This should be usable to obtain+This is a small tool to allow creating CSRs and importing/exporting certificate chains and other files.  This should be usable to obtain
 a trusted Let's Encrypt certificate before the ACMEv2 endpoint goes live.  After that, it would be much better to use [[module:letsyncrypt|LetSyncrypt]]. a trusted Let's Encrypt certificate before the ACMEv2 endpoint goes live.  After that, it would be much better to use [[module:letsyncrypt|LetSyncrypt]].
  
 ===== Options ===== ===== Options =====
 +
 +''%%--%%export-pkcs12 <file>'' Exports the current private key and certificate as a PKCS#12 file, encrypted using the system password.  File name must end in .p12.
 +
 +''%%--%%import-pkcs12 <file>'' Imports the current private key and certificate as a PKCS#12 file **OVERWRITING THE CURRENT ONE**, encrypted using the system password.  File name must end in .p12.
  
 ''%%--%%csr'' Generates a CSR. ''%%--%%csr'' Generates a CSR.
Line 12: Line 16:
 ''%%jsexec certtool --csr --domain nix.synchro.net --domain gallery.bbsdev.net --domain pics.bbsdev.net --domain home.bbsdev.net%%'' > csr.pem ''%%jsexec certtool --csr --domain nix.synchro.net --domain gallery.bbsdev.net --domain pics.bbsdev.net --domain home.bbsdev.net%%'' > csr.pem
  
-''%%--%%import'' Imports a certificate chain.  This must be a single text file with the whole certificate chain in separate contains like this:+''%%--%%import <file>'' Imports a certificate chain.  This must be a single text file with the whole certificate chain in separate contains like this:
  
 <file> <file>
Line 75: Line 79:
 </file> </file>
  
 +For example:
 +  jsexec certtool --import /tmp/le.cert
 ===== See Also ===== ===== See Also =====
   * [[:module:|module index]]   * [[:module:|module index]]
 +  * [[LetSyncrypt]]
  
-{{tag>}}+{{tag>jsutil letsencrypt tls ssl crypt}}