[ANN] Announcing gemcert, a simple certificate generator
Solderpunk
solderpunk at posteo.net
Wed Jul 15 18:58:25 BST 2020
Ahoy!
My dead simple alternative to using `openssl` and its overwhelming
torrent of cryptic command line switches to generate self-signed
certificates for use in Geminispace is finally starting to take shape
and is now ready for some test driving:
https://tildegit.org/solderpunk/gemcert
Some example incantations follow.
Want to make certificate to use for your server at example.com? Run:
gemcert -server -domain example.com
and that's it! You'll get, by default, an ECDSA cert valid for any
subdomain of example.com for 5 years. Prefer ED25519 and 2 years of
validity? Easy:
gemcert -server -domain example.com -ed25519 -years 2
Want a long-lived certificate you can use as a client cert for
Astrobotany, with the username HirokoAi? Easy:
gemcert -client -cn HirokoAi -years 100
You get the idea.
It's still a little rough around the edges in some respects (e.g. the
output is always saved to cert.pem and key.pem in the pwd), but it
should be usable with some care. Feedback very welcome!
Cheers,
Solderpunk
More information about the Gemini
mailing list