Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/yakuter/gossl
Cross platform, easy to use SSL/TLS toolset
https://github.com/yakuter/gossl
certificate go golang ssh-copy-id ssh-keygen ssl ssl-certificates tls tls-certificate
Last synced: 18 days ago
JSON representation
Cross platform, easy to use SSL/TLS toolset
- Host: GitHub
- URL: https://github.com/yakuter/gossl
- Owner: yakuter
- License: apache-2.0
- Created: 2022-04-06T22:42:00.000Z (over 2 years ago)
- Default Branch: main
- Last Pushed: 2022-04-19T07:16:25.000Z (over 2 years ago)
- Last Synced: 2024-10-15T17:59:59.655Z (30 days ago)
- Topics: certificate, go, golang, ssh-copy-id, ssh-keygen, ssl, ssl-certificates, tls, tls-certificate
- Language: Go
- Homepage:
- Size: 146 KB
- Stars: 188
- Watchers: 7
- Forks: 13
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- Funding: .github/FUNDING.yml
- License: LICENSE
Awesome Lists containing this project
README
Gopher design by Tugay BALCI
# GoSSL
GoSSL is a cross platform, easy to use SSL/TLS toolset written with Go and built with ❤️
## Features
- Generate RSA private and public key - key command
- Generate x509 RSA Certificate Request (CSR) - cert command
- Generate x509 RSA Root CA - cert command
- Generate x509 RSA Certificate - cert command
- Get information about an x509 RSA Certificate - info command
- Verify a Certificate with a Root CA - verify command
- Verify a URL with a Root CA - verify command
- Generate SSH key pair - ssh command
- Copy SSH public key to remote SSH server - ssh-copy command
## Install
Executable binaries can be downloaded at [Releases](https://github.com/yakuter/gossl/releases) page according to user's operating system and architecture. After download, extract compressed files and start using GoSSL via terminal.
### MacOS Homebrew Install
MacOS users can install GoSSL via Homebrew with the commands below.
```bash
brew tap yakuter/homebrew-tap
brew install gossl
```
## Commands
### version
`version` command displays the current version of GoSSL
```bash
gossl -v
gossl --version
```
### help
`help` command displays default help and existing commands. It can also be used to get sub command helps.
```bash
gossl help
gossl help cert
...
```
### key
`key` command generates RSA private key with provided bit size.
```bash
gossl key --help
gossl key --bits 2048
gossl key --bits 2048 --out private.key
gossl key --bits 2048 --out private.key --withpub
```
### info
`info` displays information about x509 certificate. Thanks [grantae](https://github.com/grantae) for great [certinfo](https://github.com/grantae/certinfo) tool which is used here.
A file path or a valid URL is used to get details of the certificate.
```bash
gossl info cert.pem
gossl info --url google.com
```
### cert
`cert` command generates x509 SSL/TLS Certificate Request (CSR), Root CA and Certificate with provided private key.
Help
```bash
gossl cert --help
```
Generate Certificate Request (CSR)
```bash
gossl cert \
--key private.key \
--out cert.csr \
--days 365 \
--serial 12345 \
--isCSR
```
Generate Root CA
```bash
gossl cert \
--key private.key \
--out ca.pem \
--days 365 \
--serial 12345 \
--isCA
```
Generate Certificate
```bash
gossl cert \
--key private.key \
--out cert.pem \
--days 365 \
--serial 12345
```
### verify
`verify` command verifies x509 certificate with provided root CA in PEM format.
```bash
gossl verify --help
// Verify certificate with root CA
gossl verify --cafile ./testdata/ca-cert.pem --certfile ./testdata/server-cert.pem
gossl verify --cafile ./testdata/ca-cert.pem --certfile ./testdata/server-cert.pem --dns 127.0.0.1
// Verify URL with root CA
gossl verify --cafile testdata/ca-cert.pem --url https://127.0.0.1
```
### ssh
`ssh` command generates SSH key pair with provided bit size just like `ssh-keygen` tool. These key pairs are used for automating logins, single sign-on, and for authenticating hosts.
```bash
gossl key --help
gossl key --bits 2048
gossl key --bits 2048 --out ./id_rsa
// output will be written to ./id_rsa and ./id_rsa_pub files
```
### ssh-copy
`ssh-copy` connects remote SSH server, creates `/home/user/.ssh` directory and `authorized_keys` file in it and appends provided public key (eg, id_rsa.pub) to `authorized_keys` file just like `ssh-copy-id` tool.
```bash
gossl ssh-copy --help
// This command will use default SSH public key path as "USER_HOME_DIR/.ssh/id_rsa.pub"
gossl ssh-copy remoteUser@remoteIP
// This command will ask for password to connect SSH server
gossl ssh-copy --pubkey /home/user/.ssh/id_rsa.pub remoteUser@remoteIP
gossl ssh-copy --pubkey /home/user/.ssh/id_rsa.pub --password passw@rd123 remoteUser@remoteIP
```
### TODO
1. Add generate command for generating private key, root ca and x509 certificates in one command
2. Add cert template format read from yaml file
3. Add certificate converter command like DER to PEM etc.