A very small utility for making self-signed certificates and private keys using ocaml-x509 and ocaml-nocrypto for key generation. Intended as a (non-drop-in) replacement for these uses of the command-line openssl
utility.
certify
depends on capabilities in x509
and nocrypto
that are available on the primary branch of its main repository but have not yet been released. It uses the latest release of cmdliner
. To get dependencies for certify via opam
:
opam pin add x509 https://github.com/mirleft/ocaml-x509.git
opam pin add nocrypto https://github.com/mirleft/ocaml-nocrypto.git
opam install nocrypto x509 cmdliner
If you wish to also use ocaml-tls
or any of its dependencies, you'll need to also pin ocaml-tls
to the primary branch of its main repository:
opam pin add https://github.com/mirleft/ocaml-tls
To install with opam:
opam pin add certify https://github.com/yomimono/ocaml-certify.git
opam install certify
Outside of opam:
git clone https://github.com/yomimono/ocaml-certify
cd ocaml-certify
./configure
make
make install
For help, try selfsign --help
or csr --help
.