NAME

sslmaker - Generate SSL key, cert and csr

SYNOPSIS

  $ sslmaker [options] {action} {arg1,...}

  # Generate root CA key and certificate
  # https://jamielinux.com/articles/2013/08/act-as-your-own-certificate-authority/
  $ sslmaker --home /path/to/pki/CA root

  # Generate intermediate CA key and certificate
  # https://jamielinux.com/articles/2013/08/create-an-intermediate-certificate-authority/
  $ sslmaker --root-home /path/to/pki/CA --home /path/to/pki/intermediate intermediate

  # Generate client or server key and certificate signing request
  # https://jamielinux.com/articles/2013/08/create-and-sign-ssl-certificates-certificate-authority/
  $ sslmaker --home /path/to/pki/intermediate generate [CN]
  $ sslmaker --home /path/to/pki/intermediate generate www.example.com
  $ sslmaker --home /path/to/pki/intermediate nginx www.example.com

  # Sign a certificate signing request
  $ sslmaker --home /path/to/pki/intermediate sign www.example.com.csr.pem [outfile]

  # Revoke a certificate
  $ sslmaker --home /path/to/pki/intermediate revoke [cert]
  $ sslmaker --home /path/to/pki/intermediate revoke intermediate/newcerts/1000.pem

  # Show the manual for App::sslmaker or the complete source code
  $ sslmaker pod
  $ sslmaker code | less

Set SSLMAKER_DEBUG=0 to avoid openssl output. Set SSLMAKER_HOME=/etc/pki for default --home. Set SSLMAKER_SUBJECT=/C=US for default --subject.

DISCLAIMER, COPYRIGHT AND LICENSE

See App::sslmaker

AUTHOR

Jan Henning Thorsen - jhthorsen@cpan.org