FreeBSD Manual Pages
winpr-makecert(1) FreeRDP winpr-makecert(1) NAME winpr-makecert - A tool to create X.509 certificates. SYNOPSIS winpr-makecert [-rdp] [-silent] [-live] [-format { crt | pem | pfx }] [-p password] [-n common_name] [-y years] [-m months] [-len length] [-# serial] [-a { md5 | sha1 | sha256 | s384 | sha512 }] [-path outputpath] [output- name] DESCRIPTION winpr-makecert is a tool for generating X.509 certificates modeled after the Windows command MakeCert. winpr-makecert aims to be command line com- patible with MakeCert however not all options are supported or implemented yet. Unimplemented features are not described here. They are marked as "Unsup- ported" in winpr-makecerts help. In contrast to it's Windows counterpart winpr-makecert does, unless the -live option is given, always creates and save a certificate. If output- name isn't set it is tried to determine the host name of the computer the command is run on. Warning: if the file already exists it will be overwritten without asking. Without further options the generated certificates have the following prop- erties: * 2048 bit long * sha256 as hash algorithm * the detected host name is used as common name * a time stamp is used as serial number * validity period of one year * saved in the current working directory in crt format OPTIONS -rdp Dummy parameter. Can be used to quickly generate a certificate with default properties without specifying any further parameters. -silentDon't print the generated certificate to stdout. -f format Three formats are supported: crt, pem and pfx. crt outputs the key and the certificate in a separate file each with the file endings .key and .crt. pem outputs the key and certificate into a single file with the file ending pem. And pfx outputs key and certificate into a pkcs12 file with the ending .pfx. -p password Password to use if the pfx format is used as format. -live Don't write the key/certificate to disk. When used from the command line this can be thought as "dummy" mode. -n common_name The common name to use in the certificate. -m months Validity period in months (multiple of 31 days, not clanendar months). -y years Validity period in years (365 days, leap years not accounted). If months and years are specified the specified the values are accumu- lated. -len length Key length in bits to use. -a { md5 | sha1 | sha256 | s384 | sha512 } The hashing algorithm to use. -# serial The serial number to use for the certificate. -path A directory where the certificate should be created in. outputname The base name of the created file(s). A suffix, the format specific suffix is appended to this name. EXAMPLES winpr-makecert -rdp Creates a certificate with the default properties, saved to a file in the current working directory in crt format named like the host. If the host is named freerdp the created files are called freerdp.key and freerdp.crt. winpr-makecert -len 4096 -a sha384 -path /tmp -# 22 -m 144 -y 1 -format crt mycert The command above creates the file /tmp/mycert.pem containing a key and a certificate with a length of 4096. It will use sha384 as hash algorithm. The certificate has the serial number 22 and is valid for 12 years (144 months). EXIT STATUS 0 Successful program execution. 1 Otherwise. SEE ALSO MakeCert help page <https://msdn.microsoft.com/library/windows/desktop/ aa386968.aspx> AUTHOR FreeRDP <team@freerdp.com> 3.30.0 2017-01-11 winpr-makecert(1)
NAME | SYNOPSIS | DESCRIPTION | OPTIONS | EXAMPLES | EXIT STATUS | SEE ALSO | AUTHOR
Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=winpr-makecert3&sektion=1&manpath=FreeBSD+Ports+15.1.quarterly>