man/ronin-cert-gen.1.md in ronin-2.0.5 vs man/ronin-cert-gen.1.md in ronin-2.1.0.rc1

- old
+ new

@@ -1,7 +1,11 @@ # ronin-cert-gen 1 "2023-02-01" Ronin "User Manuals" +## NAME + +ronin-cert-gen - Generates a new X509 certificate + ## SYNOPSIS `ronin cert-gen` [*options*] ## DESCRIPTION @@ -9,102 +13,102 @@ Generates a new X509 certificate. ## OPTIONS `--version` *NUM* - The certificate version number Defaults to `2` if not given. +: The certificate version number Defaults to `2` if not given. `--serial` *NUM* - The certificate serial number Defaults to `0` if not given. +: The certificate serial number Defaults to `0` if not given. `--not-before` *TIME* - When the certificate becomes valid. Defaults to the current time. +: When the certificate becomes valid. Defaults to the current time. `--not-after` *TIME* - When the certificate becomes no longer valid. Defaults to one year from now. +: When the certificate becomes no longer valid. Defaults to one year from now. `-c`, `--common-name` *DOMAIN* - The Common Name (CN) for the certificate. +: The Common Name (CN) for the certificate. `-A`, `--subject-alt-name` *HOST*\|*IP* - Adds HOST or IP to `subjectAltName`. +: Adds HOST or IP to `subjectAltName`. `-O`, `--organization` *NAME* - The Organization (O) for the certificate. +: The Organization (O) for the certificate. `-U`, `--organizational-unit` *NAME* - The Organizational Unit (OU). +: The Organizational Unit (OU). `-L`, `--locality` *NAME* - The locality for the certificate. +: The locality for the certificate. `-S`, `--state` *XX* - The two-letter State (ST) code for the certificate. +: The two-letter State (ST) code for the certificate. `-C`, `--country` *XX* - The two-letter Country (C) code for the certificate. +: The two-letter Country (C) code for the certificate. -`-t`, `--key-type `rsa`\|`ec` - The signing key type. +`-t`, `--key-type `rsa`\|`dsa`\|`ec` +: The signing key type. `--generate-key` *PATH* - Generates and saves a random key. Defaults to `key.pem` if not given. +: Generates and saves a random key. Defaults to `key.pem` if not given. `-k`, `--key-file` *FILE* - Loads the signing key from the *FILE*. +: Loads the signing key from the *FILE*. `-H`, `--signing-hash` `sha256`\|`sha1`\|`md5` - The hash algorithm to use for signing. Defaults to `sha256` if not given. +: The hash algorithm to use for signing. Defaults to `sha256` if not given. `--ca-key` *FILE* - The Certificate Authority (CA) key. +: The Certificate Authority (CA) key. `--ca-cert` *FILE* - The Certificate Authority (CA) certificate. +: The Certificate Authority (CA) certificate. `--ca` - Generates a CA certificate. +: Generates a CA certificate. `-o`, `--output` *FILE* - The output file to save the generated certificate to. Defaults to `cert.crt` +: The output file to save the generated certificate to. Defaults to `cert.crt` if not given. `-h`, `--help` - Print help information. +: Print help information. ## EXAMPLES Generates self-signed certificate in `cert.crt` and a new private key in `key.pem`: - ronin cert-gen -c test.com -O "Test Co" -U "Test Dept" \ - -L "Test City" -S NY -C US + $ ronin cert-gen -c test.com -O "Test Co" -U "Test Dept" \ + -L "Test City" -S NY -C US Generates a new self-signed certificate for `test.com` in `cert.crt` using the private key in `private.key`: - ronin cert-gen -c test.com -O "Test Co" -U "Test Dept" \ - -L "Test City" -S NY -C US \ - --key-file private.key + $ ronin cert-gen -c test.com -O "Test Co" -U "Test Dept" \ + -L "Test City" -S NY -C US \ + --key-file private.key Generates a new self-signed certificate with a alternative name `www.test.com`: - ronin cert-gen -c test.com -A www.test.com -O "Test Co" -U "Test Dept" \ - -L "Test City" -S NY -C US + $ ronin cert-gen -c test.com -A www.test.com -O "Test Co" -U "Test Dept" \ + -L "Test City" -S NY -C US Generates a new CA certificate which can sign other certificates: - ronin cert-gen --ca -c "Test CA" -O "Test Co" -U "Test Dept" \ - -L "Test City" -S NY -C US + $ ronin cert-gen --ca -c "Test CA" -O "Test Co" -U "Test Dept" \ + -L "Test City" -S NY -C US Generates a new sub-certificate using the CA certificate `ca.crt` and signing key `ca.key`: - ronin cert-gen -c test.com -O "Test Co" -U "Test Dept" \ - -L "Test City" -S NY -C US \ - --ca-key ca.key --ca-cert ca.crt + $ ronin cert-gen -c test.com -O "Test Co" -U "Test Dept" \ + -L "Test City" -S NY -C US \ + --ca-key ca.key --ca-cert ca.crt ## AUTHOR Postmodern <postmodern.mod3@gmail.com> ## SEE ALSO -ronin-cert-grab(1) ronin-cert-dump(1) +[ronin-cert-grab](ronin-cert-grab.1.md) [ronin-cert-dump](ronin-cert-dump.1.md)