NAME

SYNOPSIS

DESCRIPTION

Unimplemented features are not described here. They are marked as "Unsupported" in winpr-makecerts help.

In contrast to it's Windows counterpart winpr-makecert does, unless the -live option is given, always creates and save a certificate. If outputname isn't set it is tried to determine the host name of the computer the command is run on.
Warning: if the file already exists it will be overwritten without asking.

Without further options the generated certificates have the following properties:

* 2048 bit long
* sha256 as hash algorithm
* the detected host name is used as common name
* a time stamp is used as serial number
* validity period of one year
* saved in the current working directory in crt format

OPTIONS

-rdp

Dummy parameter. Can be used to quickly generate a certificate with default properties without specifying any further parameters.

-silent

Don't print the generated certificate to stdout.

-f format

Three formats are supported: crt, pem and pfx.
crt outputs the key and the certificate in a separate file each with the file endings .key and .crt.
pem outputs the key and certificate into a single file with the file ending pem.
And pfx outputs key and certificate into a pkcs12 file with the ending .pfx.

-p password

Password to use if the pfx format is used as format.

-live

Don't write the key/certificate to disk. When used from the command line this can be thought as "dummy" mode.

-n common_name

The common name to use in the certificate.

-m months

Validity period in months.

-y years

Validity period in years. If months and years are specified the specified month parameter will take precedence.

-len length

Key length in bits to use.

-a { md5 | sha1 | sha256 | s384 | sha512 }

The hashing algorithm to use.

-# serial

The serial number to use for the certificate.

-path

A directory where the certificate should be created in.

outputname

The base name of the created file(s). A suffix, the format specific suffix is appended to this name.

EXAMPLES

Creates a certificate with the default properties, saved to a file in the current working directory in crt format named like the host. If the host is named freerdp the created files are called freerdp.key and freerdp.crt.

winpr-makecert -len 4096 -a sha384 -path /tmp -# 22 -m 144 -y 1 -format crt mycert

The command above creates the file /tmp/mycert.pem containing a key and a certificate with a length of 4096. It will use sha384 as hash algorithm. The certificate has the serial number 22 and is valid for 12 years (144 months).

EXIT STATUS

0

Successful program execution.

1

Otherwise.

SEE ALSO

AUTHOR