{"id":20189462,"url":"https://github.com/moorara/gocert","last_synced_at":"2025-10-03T13:15:04.911Z","repository":{"id":27952994,"uuid":"113057082","full_name":"moorara/gocert","owner":"moorara","description":"🔒 Generate Self-Signed TLS/SSL Certificates Pain-Free!","archived":false,"fork":false,"pushed_at":"2025-03-18T03:40:05.000Z","size":2704,"stargazers_count":42,"open_issues_count":2,"forks_count":4,"subscribers_count":3,"default_branch":"main","last_synced_at":"2025-04-10T08:16:31.913Z","etag":null,"topics":["certificate","cli-tool","go","golang","ssl","tls"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/moorara.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2017-12-04T15:03:58.000Z","updated_at":"2025-02-02T10:40:42.000Z","dependencies_parsed_at":"2023-11-26T01:25:07.967Z","dependency_job_id":"0cb4d03b-c311-4715-9fe1-27f00f3fbeda","html_url":"https://github.com/moorara/gocert","commit_stats":null,"previous_names":[],"tags_count":9,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moorara%2Fgocert","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moorara%2Fgocert/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moorara%2Fgocert/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/moorara%2Fgocert/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/moorara","download_url":"https://codeload.github.com/moorara/gocert/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248182096,"owners_count":21060893,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["certificate","cli-tool","go","golang","ssl","tls"],"created_at":"2024-11-14T03:37:29.970Z","updated_at":"2025-10-03T13:14:59.884Z","avatar_url":"https://github.com/moorara.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"[![Go Doc][godoc-image]][godoc-url]\n[![Build Status][workflow-image]][workflow-url]\n[![Go Report Card][goreport-image]][goreport-url]\n[![Test Coverage][codecov-image]][codecov-url]\n\n# gocert\n\nIf you are having a hard time every time using `openssl` for generating self-signed certificates, this tool is for you!\nA lightweight library and also command-line interface for generating self-signed SSL/TLS certificates using pure go.\n\n[![asciicast](https://asciinema.org/a/vGNpB4ClRhBBoR3KOH6EVRzpH.svg)](https://asciinema.org/a/vGNpB4ClRhBBoR3KOH6EVRzpH)\n\n## Install\n\n```\nbrew install moorara/brew/gocert\n```\n\nFor other platforms, you can download the binary from the [latest release](https://github.com/moorara/gocert/releases/latest).\n\n## Quick Start\n\n```\nmkdir certs\ncd certs\n\ngocert init\ngocert root\n\ngocert intermediate -name=sre\ngocert sign -ca=root -name=sre\n\ngocert server -name=webapp\ngocert client -name=myservice\ngocert sign -ca=sre -name=webapp,myservice\n\ngocert verify -ca=root -name=sre\ngocert verify -ca=sre -name=webapp,myservice\n```\n\n## Certificates Explained\n\nYou can generate the following types of certificates:\n\n  - Root Certificate Authority\n  - Intermediate Certificate Authority\n  - Server Certificate\n  - Client Certificate\n\n**Root CA** is only used for signing intermediate CA.\nThere is only one root CA called `root` by default.\nRoot CA never signs user certificates (server or client) directly.\nIt should be keep secured, offline, and unused as much as possible.\n\n**Intermediate CA** is used for signing server and client certificates.\nIt must be signed by `root` CA.\nIf an intermediate key is comprised, the root CA can revoke the intermediate CA and create a new one.\n\n**Server** certificates can be used for securing servers and establishing SSL/TLS servers.\nThey should be signed by an intermediate certificate.\nThe `CommonName` for server certificates must be a *Fully Qualified Domain Name* (FQDN).\n\n**Client** certificates can be used for client authentication and MTLS communications between services.\nThey should be signed by an intermediate certificate.\n\n### Default Configs\n\n| Type         | Key Length | Expiry Days     |\n| ------------ | ---------- | --------------- |\n| Root         | 4096       | 7300 (20 years) |\n| Intermediate | 4096       | 3650 (10 years) |\n| Server       | 2048       | 375 (~1 year)   |\n| Client       | 2048       | 40 (~1 month)   |\n\nYou can change these configs by editing `state.yaml` file.\n\n\n[godoc-url]: https://pkg.go.dev/github.com/moorara/gocert\n[godoc-image]: https://pkg.go.dev/badge/github.com/moorara/gocert\n[workflow-url]: https://github.com/moorara/gocert/actions\n[workflow-image]: https://github.com/moorara/gocert/workflows/Main/badge.svg\n[goreport-url]: https://goreportcard.com/report/github.com/moorara/gocert\n[goreport-image]: https://goreportcard.com/badge/github.com/moorara/gocert\n[codecov-url]: https://codecov.io/gh/moorara/gocert\n[codecov-image]: https://codecov.io/gh/moorara/gocert/branch/main/graph/badge.svg\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmoorara%2Fgocert","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmoorara%2Fgocert","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmoorara%2Fgocert/lists"}