incert

Incert

A command line utility for generating single use certificate authorities and issuing certificates.

Overview

There are a number of situations in which having an ephemeral certificate authority is sufficient or optimal. Incert fills this role by generating a new certificate authority on every run and issuing the requested certificates from that authority. None of the authority's cryptographic key material is persisted to disk so once the run completes no additional certificates can be issued by that certificate authority.

Usage

Installation

Single

In order to generate a single certificate run the following command.

incert issue single -c localhost -a localhost -a localhost.localdomain -e 86000s

This will create the following files in the current directory.

Batch

In order to generate a multiple certificates run the following command.

incert issue batch --config ./config.json

Where config.json contains the following content.

{
	"values": [
		{
			"commonName": "localhost",
			"alternativeNames": [
				"localhost",
				"localhost.localdomain"
			],
			"expires": "24h"
		},
		{
			"commonName": "example.com",
			"alternativeNames": [
				"example.com",
				"www.example.com"
			],
			"expires": "1h"
		}
	]
}

This will create the following files in the current directory.

Development

Prerequisites

Building

Testing

Deploying