Skip to content

Latest commit

 

History

History
32 lines (26 loc) · 651 Bytes

File metadata and controls

32 lines (26 loc) · 651 Bytes

client-cert-manager

A lightweight script to manage a private Certificate Authority (CA) and issue client certificates for mTLS.

Setup

  1. Build the image:
podman build -t my-ca .
  1. Create a data directory:
mkdir ./my-ca-data

Commands

Initialize CA

podman run --rm -v ./my-ca-data:/data my-ca init "CA NAME"

Create Client Certificate

Generates a .p12 file (AES-256 encrypted) for a user.

  • Usage: new-client <name> <UUID> [password]
  • Default Password: changeit
podman run --rm -v ./my-ca-data:/data my-ca new-client \
"MyPhone" \
"000d10000-abcd-dcba-abcd-00000d100000" \
"PASSWORD"