- Go 84.4%
- Shell 10.2%
- Makefile 5.4%
| .forgejo/workflows | New upstream version 5.0.5 | |
| cmd/vpn-ca | New upstream version 5.0.5 | |
| debian | Go compiler update | |
| .gitignore | New upstream version 4.0.0 | |
| AUTHORS.md | New upstream version 3.1.0 | |
| benchmark.sh | New upstream version 5.0.0 | |
| binary_release.sh | New upstream version 4.0.3 | |
| CHANGES.md | New upstream version 5.0.5 | |
| go.mod | New upstream version 5.0.4 | |
| LICENSE | New upstream version 2.0.1 | |
| Makefile | New upstream version 5.0.2 | |
| README.md | New upstream version 5.0.3 | |
| vpn-ca.1.scd | New upstream version 5.0.0 | |
Summary: Simple CA to manage server and client certificates
Description: Simple CA that can be used to manage server and client certificates for use with e.g. TLS VPNs, 802.1X or a simple home lab with self issued certificates.
License: MIT
Introduction
Simple CA that can be used to manage server and client certificates for use with e.g. TLS VPNs, 802.1X, or a simple home lab with self issued certificates.
Why
We needed something more robust and simpler than easy-rsa.
Build
$ go build -o vpn-ca codeberg.org/eduVPN/vpn-ca/cmd/vpn-ca
We also provide a Makefile for your convenience:
$ make
To generate the manpage, make sure you have scdoc installed and run:
$ make vpn-ca.1
Usage
$ ./vpn-ca --help
You can also look at the provided vpn-ca(1) manpage:
$ man ./vpn-ca.1
If you installed vpn-ca through your package manager you can also open the
installed manpage:
$ man 1 vpn-ca
Another option is to read the manpage source.
PKCS#12
If you want to create a .p12 file for (easy) importing client certificates
in e.g. mobile devices, you can use openssl for this. For example:
$ vpn-ca -client -name foo
$ openssl pkcs12 -export -chain -in foo.crt -inkey foo.key -CAfile ca.crt -out foo.p12