This is an OpenSSL certificate toolkit utility leveraging OpenSSL's CLI for Linux. This is a simple wrapper utility for OpenSSL CLI to help automate common certificate tasks.
Download openssl-toolkit-1.1.0.zip or see below one-liner to download, extract, launch:
echo https://github.com/tdharris/openssl-toolkit/releases/download/1.1.0/openssl-toolkit-1.1.0.zip \
| xargs wget -qO- -O tmp.zip && unzip -o tmp.zip && rm tmp.zip && ./openssl-toolkit/openssl-toolkit.sh
The following tasks are supported:
-
Create certificates:
- Self-Signed SSL Certificate (key, csr, crt)
- Private Key & Certificate Signing Request (key, csr)
- PEM from previous certificates (key, crt, intermediate crts)
-
Convert certificates:
PEM
->DER
PEM
->P7B
PEM
->PFX
DER
->PEM
P7B
->PEM
P7B
->PFX
PFX
->PEM
-
Verify certificates:
- CSR is signed by private key
- Public certificate and private key are a keypair
- 3rd party intermediate chain file and signed public certificate are a keypair
- Check date validity of certificates
-
Test ssl server:
- SSL Certificate handshake
- SSL Server date validity
- Permitted Protocols
-
Output certificate information:
- Output the details from a certifticate sign request
- Output the details from a signed certificate