Documentation
¶
Overview ¶
Command testcert-gen generates TLS certificates and keys for use in the Emissary test suite. The program is named `testcert-gen`, not `cert-gen`, because you should absoulutely never ever use thi to generate a real cert.
While it would be good if the certs were generated dynamically by the tests, that's not the way things are set up, so for the time being, they are certs are generated ahead-of-time by `make generate` and checked in to Git. Because we do this in `make generate`, we need it to be deterministic. Seriously, don't ever use this to generate a real cert.
The cert's private key (despite appearing to be 2048 bits) is really just 64 bits strung out, where those 64 bits are deterministically determined by the requested attributes of the cert. Seriously, don't ever use this to generate a real cert.
Source Files