make-ssl-cert (8) - Linux Manuals
make-ssl-cert: Debconf wrapper for openssl
make-ssl-cert - Debconf wrapper for openssl
SYNOPSISmake-ssl-cert [,OPTION/]... template output-certificate
make-ssl-cert [,OPTION/]... generate-default-snakeoil
DESCRIPTIONmake-ssl-cert is a simple debconf to openssl wrapper to create self-signed certificates. It requires a source template (Ex: /usr/share/ssl-cert/ssleay.cnf) and it will place the new generated certificate in the specified output file.
Invoked with "generate-default-snakeoil", it will generate /etc/ssl/certs/ssl-cert-snakeoil.pem and /etc/ssl/private/ssl-cert-snakeoil.key.
OPTIONSA summary of options are included below.
- Always create a new certificate, even if the file already exists. For backwards compatibility with 1.0.x, this option can be given as last argument, too.
- Never overwrite an existing file, even if the old certificate's key length is too small or if it uses an obsoltete signature algorithm.
- --expiration-days N
- Make the new certificate expire in N days. Default is 3650.
AUTHORThe program author is Thom May <thom [at] debian.org>, manual page was written for completeness by Fabio M. Di Nitto <fabbione [at] fabbione.net>, for the Debian GNU/Linux system (but may be used by others).