https://github.com/yingzhuo/certificate-key-generator
this helper generate certificate and key(s) for you.
https://github.com/yingzhuo/certificate-key-generator
bash https java jwt keystore keytool openssl pem pkcs12 pkcs8 self-signed-certificate shell signature spring-boot spring-security ssl tls truststore two-way-ssl-authentication x509
Last synced: 3 months ago
JSON representation
this helper generate certificate and key(s) for you.
- Host: GitHub
- URL: https://github.com/yingzhuo/certificate-key-generator
- Owner: yingzhuo
- License: apache-2.0
- Created: 2024-07-15T03:22:42.000Z (12 months ago)
- Default Branch: main
- Last Pushed: 2024-07-20T10:05:48.000Z (11 months ago)
- Last Synced: 2025-01-22T23:11:36.735Z (5 months ago)
- Topics: bash, https, java, jwt, keystore, keytool, openssl, pem, pkcs12, pkcs8, self-signed-certificate, shell, signature, spring-boot, spring-security, ssl, tls, truststore, two-way-ssl-authentication, x509
- Language: Shell
- Homepage:
- Size: 16.6 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
## Certificate & Key Generator
本项目用于生成应用程序需要的SSL自签名证书，秘钥等。
使用另一款开源工具[KeyStore Explorer](https://keystore-explorer.org/index.html)来生成自签名证书也是一个不错的主意，具体请看此[教程](https://medium.com/@deyjsuka/ssl-certificate-generation-self-signed-and-ca-signed-5289d20b1be8)。如此，您可能用不到本项目。
### (1) 工具
* make
* openssl
* keytool
### (2) 用法
```bash
# 生成自签名根证书
make gen-rootca
# 生成服务器端用证书和秘钥
make gen-server
# 生成客户端用证书和秘钥 (可选)
# 如果您的应用程序不需要SSL双向认证，您无需此功能。
make gen-client
# 生成JWT签名用证书和秘钥 (可选)
# 若您的应用程序用不到JWT，您无需此功能。
make gen-jwt
# 清除已生成的文件 (根证书和秘钥不会被删除)
make clean
# 清除已生成的文件 (根证书和秘钥也被删除) (危险!)
make clean-all
# 查看更多功能
make usage
```
### (3) 注意事项
* 可按照实际需求更改[变量文件](/shells/env.sh)。建议您优先使用`PKCS#12`格式的文件。
* 本程序生成的私钥文件(.pem)都是无加密的。请您注意保管。
* 本程序生成的KeyStore文件(.p12)的`storepass`和`keypass`是一致的，默认值为`changeit`。
### (4) 参考文献
* [https://www.baeldung.com/x-509-authentication-in-spring-security](https://www.baeldung.com/x-509-authentication-in-spring-security)
* [https://www.golinuxcloud.com/openssl-subject-alternative-name/](https://www.golinuxcloud.com/openssl-subject-alternative-name/)
### (5) 许可证
* [Apache-2.0](./LICENSE)