|
|
@@ -7,28 +7,29 @@ This is the command line version, which can be installed locally and run securel
|
|
|
Install
|
|
|
=======
|
|
|
|
|
|
-<code>git clone http://gitlab.perpetual.name/doctor/certgencli.git CertGenCLI</code>
|
|
|
+<code>git clone http://gitlab.perpetual.name/doctor/certgencli.git CertGenCLI
|
|
|
|
|
|
cd CertGenCLI
|
|
|
+</code>
|
|
|
|
|
|
Either install the python cryptography package
|
|
|
|
|
|
- apt-get install python-cryptography
|
|
|
+<code> apt-get install python-cryptography</code>
|
|
|
|
|
|
or
|
|
|
|
|
|
- pip install -r requirements.txt
|
|
|
+<code> pip install -r requirements.txt</code>
|
|
|
|
|
|
The latter doesn't appear to work too well on Debian.
|
|
|
|
|
|
Run
|
|
|
===
|
|
|
|
|
|
- cli.py -c <County> -s <State> -l <Location> -o <Organisation> -u <Organisation Unit> -n <CN> -r <CRLDP> -p <password> -d <Output Directory>
|
|
|
+<code> cli.py -c <County> -s <State> -l <Location> -o <Organisation> -u <Organisation Unit> -n <CN> -r <CRLDP> -p <password> -d <Output Directory></code>
|
|
|
|
|
|
e.g.
|
|
|
|
|
|
- cli.py -d /tmp -n fred.site.com -cGB -sWales -lCardiff -oSomewhere -uSomething -pakjdslfasd
|
|
|
+ <code> cli.py -d /tmp -n fred.site.com -cGB -sWales -lCardiff -oSomewhere -uSomething -pakjdslfasd</code>
|
|
|
|
|
|
This will create all the necessary certificates in /tmp
|
|
|
|
|
|
@@ -67,15 +68,15 @@ Notes
|
|
|
|
|
|
You can check the certificates by running:
|
|
|
|
|
|
-openssl x509 -noout -text -in <certname>
|
|
|
+<code>openssl x509 -noout -text -in <certname></code>
|
|
|
|
|
|
which will work for rootca.pem and server-cert.pem
|
|
|
|
|
|
-openssl rsa -in <keyname> -check
|
|
|
+<code>openssl rsa -in <keyname> -check</code>
|
|
|
|
|
|
which will work for server-key.pem and root-key.pem
|
|
|
|
|
|
-openssl crl -noout -text -in <crlfile>
|
|
|
+<code>openssl crl -noout -text -in <crlfile></code>
|
|
|
|
|
|
which will work for list.crl
|
|
|
|
