README
¶
Overview
Zcert is a tool for managing a certificate authority over a network. It only deals with ed25519 certificates.
Quick Start
# To create a certificate authority & initialize the database
zcert init
# To generate a shared authentication key for message authentication codes
zcert authkey generate
# To start listening for requests
zcert server
# To have the server sign a certificate signing request
zcert client sign --in request.csr
Server Usage
First run zcert init to initialize the database and create the certificate authority. Then run zcert server to listen for HTTP connections.
zcert has 2 routes
| Method | Privileged | Path | Function |
|---|---|---|---|
| GET | No | /ca | shows the certificate authority |
| POST | Yes | /sign | signs the certificate signing request to create a signed certificate |
If a route is privileged, zcert will expect and validate a message authentication code.
Client Usage
Currently zcert has 1 client command, zcert client sign. This command will take a certificate signing request, send it to the server, and write the signed certificate out. It can read and write from files or stdin/stdout.
Configuration
The configuration file for zcert is named zcert.yml. zcert authkey generate can be used to generate a suitable key for the message authentication codes.
Documentation
¶
Overview ¶
Copyright © 2022 Tanner Storment
This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.
This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more details.
You should have received a copy of the GNU Affero General Public License along with this program. If not, see <http://www.gnu.org/licenses/>.
Source Files
Directories