1 unstable release

0.1.0 Mar 29, 2024

#2690 in Cryptography

Download history 200/week @ 2024-11-15 243/week @ 2024-11-22 140/week @ 2024-11-29 174/week @ 2024-12-06 144/week @ 2024-12-13 33/week @ 2024-12-20 128/week @ 2024-12-27 379/week @ 2025-01-03 510/week @ 2025-01-10 534/week @ 2025-01-17 676/week @ 2025-01-24 387/week @ 2025-01-31 598/week @ 2025-02-07 462/week @ 2025-02-14 681/week @ 2025-02-21 914/week @ 2025-02-28

2,719 downloads per month

MIT/Apache

190KB
4K SLoC

rustls-cert-gen

rustls-cert-gen is a tool to generate TLS certificates. In its current state it will generate a Root CA and an end-entity certificate, along with private keys. The end-entity certificate will be signed by the Root CA.

Usage

Having compiled the binary you can simply pass a path to output generated files.

cargo run -- -o output/dir

In the output directory you will find these files:

  • cert.pem (end-entity's X.509 certificate, signed by root-ca's key)
  • cert.key.pem (end-entity's private key)
  • root-ca.pem (ca's self-signed X.509 certificate)

For a complete list of supported options:

rustls-cert-gen --help

FAQ

What signature schemes are available?

  • pkcs_ecdsa_p256_sha256
  • pkcs_ecdsa_p384_sha384
  • pkcs_ed25519

lib.rs:

This library wraps [rcgen] to provide a simple API to generate TLS certificate-chains. Its primary intent is to ease development of applications that verify chains of trust. It can be used for whatever purpose you may need a TLS certificate-chain.

Dependencies

~8–30MB
~710K SLoC