Certificates

This section contains scripts related to standalone and certificate-authority-based certificates.

Standalone Certificates

Standalone certificates are useful if

  • you do not use mutual TLS

  • the HTTP-client can be configured to ignore self-signed certificates

    $ curl --insecure ...
$ wget --no-check-certificate ...
$ http --verify=no ...

  • the server’s certificate verifier supports using a trust anchor as both a CA certificate and an end-entity certificate

  • you can add the certificate to your trust store
create_self_signed_cert

create a private key and a self-signed certificate

delete_self_signed_cert

delete a private key and a self-signed certificate

renew_self_signed_cert

renew a private key and a self-signed certificate

verify_self_signed_cert

verify a private key and a self-signed certificate

Certificate-Authority-Based Certificates

Certificate-authority-based certificates are useful if

  • you want to use mutual TLS

  • the server’s certificate verifier does not support using a trust anchor as both a CA certificate and an end-entity certificate, (e.g., rusttls)

Standalone certificates are simpler to use than certificate-authority-based certificates.
copy_ca_based_cert

copy a private key and a certificate-authority-based certificate

copy_ca_root_cert

copy the root certificate of a certificate authority

create_ca

create a certificate authority and its root certificate

create_ca_based_cert

create a private key and a certificate based on a certificate authority

delete_ca

delete the certificate authority

delete_ca_based_cert

delete a private key and a certificate from a certificate authority

renew_ca_based_cert

renew a private key and a certificate based on a certificate authority.

verify_ca_based_cert

verify a private key and a certificate-authority-based certificate