certtool

linux

Generate and manage X.509 certificates, keys, and PKI structures using GnuTLS.

More info →

Options (3)

-p, --generate-privkeyboolean

Generate a private key and save it to a file

Example: certtool {{[-p|--generate-privkey]}} --outfile {{path/to/private.key}}

-s, --generate-self-signedboolean

Generate a self-signed certificate using a private key and a template file

Example:

certtool {{[-s|--generate-self-signed]}} --load-privkey {{path/to/private.key}} --template {{path/to/info.template}} --outfile {{path/to/certificate.crt}}

-q, --generate-requestboolean

Generate a certificate signing request (CSR)

Example:

certtool {{[-q|--generate-request]}} --load-privkey {{path/to/private.key}} --template {{path/to/info.template}} --outfile {{path/to/request.csr}}

Examples (5)

Generate a private key and save it to a file

certtool [-p|--generate-privkey] --outfile path/to/private.key

Generate a self-signed certificate using a private key and a template file

certtool [-s|--generate-self-signed] --load-privkey path/to/private.key --template path/to/info.template --outfile path/to/certificate.crt

Generate a certificate signing request (CSR)

certtool [-q|--generate-request] --load-privkey path/to/private.key --template path/to/info.template --outfile path/to/request.csr

Generate a certificate authority (CA) certificate

certtool [-s|--generate-self-signed] --load-privkey path/to/ca.key --template path/to/ca.template --outfile path/to/ca.crt

Verify a certificate against a CA certificate

certtool --verify --infile path/to/certificate.crt --load-ca-certificate path/to/ca.crt

made by @shridhargupta | data from tldr-pages