1 unstable release

0.1.0 Mar 29, 2024

#1949 in Cryptography

Download history 1/week @ 2024-06-18 261/week @ 2024-06-25 181/week @ 2024-07-02 335/week @ 2024-07-09 130/week @ 2024-07-16 271/week @ 2024-07-23 241/week @ 2024-07-30 200/week @ 2024-08-06 498/week @ 2024-08-13 456/week @ 2024-08-20 178/week @ 2024-08-27 224/week @ 2024-09-03 213/week @ 2024-09-10 190/week @ 2024-09-17 280/week @ 2024-09-24

923 downloads per month

MIT/Apache

185KB
4K SLoC

rustls-cert-gen

rustls-cert-gen is a tool to generate TLS certificates. In its current state it will generate a Root CA and an end-entity certificate, along with private keys. The end-entity certificate will be signed by the Root CA.

Usage

Having compiled the binary you can simply pass a path to output generated files.

cargo run -- -o output/dir

In the output directory you will find these files:

  • cert.pem (end-entity's X.509 certificate, signed by root-ca's key)
  • cert.key.pem (end-entity's private key)
  • root-ca.pem (ca's self-signed X.509 certificate)

For a complete list of supported options:

rustls-cert-gen --help

FAQ

What signature schemes are available?

  • pkcs_ecdsa_p256_sha256
  • pkcs_ecdsa_p384_sha384
  • pkcs_ed25519

lib.rs:

This library wraps [rcgen] to provide a simple API to generate TLS certificate-chains. Its primary intent is to ease development of applications that verify chains of trust. It can be used for whatever purpose you may need a TLS certificate-chain.

Dependencies

~8–28MB
~673K SLoC