lilith/tldr
1
0
Fork 0
mirror of https://github.com/tldr-pages/tldr.git synced 2025-08-05 04:15:36 +02:00
Code Activity
tldr/pages/linux/certtool.md
Aadish M 50f3b3aee6
certtool: add page (#17391) 
* certtool: add page

---------

Co-authored-by: Managor <42655600+Managor@users.noreply.github.com>
Co-authored-by: Fazle Arefin <fazlearefin@users.noreply.github.com>
2025-07-29 19:50:29 +10:00

1.1 KiB
Raw Permalink Blame History

certtool

Generate and manage X.509 certificates, keys, and PKI structures using GnuTLS. More information: https://gnutls.org/manual/gnutls.html#certtool-Invocation.

  • Generate a private key and save it to a file:

certtool {{[-p|--generate-privkey]}} --outfile {{path/to/private.key}}

  • Generate a self-signed certificate using a private key and a template file:

certtool {{[-s|--generate-self-signed]}} --load-privkey {{path/to/private.key}} --template {{path/to/info.template}} --outfile {{path/to/certificate.crt}}

  • Generate a certificate signing request (CSR):

certtool {{[-q|--generate-request]}} --load-privkey {{path/to/private.key}} --template {{path/to/info.template}} --outfile {{path/to/request.csr}}

  • Generate a certificate authority (CA) certificate:

certtool {{[-s|--generate-self-signed]}} --load-privkey {{path/to/ca.key}} --template {{path/to/ca.template}} --outfile {{path/to/ca.crt}}

  • Verify a certificate against a CA certificate:

certtool --verify --infile {{path/to/certificate.crt}} --load-ca-certificate {{path/to/ca.crt}}