

If no keychain is specified, keys and certs are added to the default keychain. If it doesn't exist and you want the keychain created for you, specify Where "ke圜hainName" is the name of the keychain into which keys and the cert will be added. Some broswers, after a fair amount of handholding, will allow you to In particular, "real world" SSL clients (e.g., web browsers) willĬomplain to varying degrees when they attempt to connect to an SSL server which presents a cert which "real world" the primary use of this command is to facilitate early development of SSL server appli- cations applicationsĬations based on SecureTransport. The cert generated by this command is totally untrustworthy and cannot be used in the The root cert is signed by the private key generated during (CRLs) into a Keychain, and to display the contents of certificates and CRLs.ĮXAMPLES Generating a Self-Signed Certificate This command generates a key pair and a self-signed (root) cer- tificate certificate P Don't create System Identity if one already exists for specified domainĭESCRIPTION Certtool is a UNIX command-line program which is used to create key pairs, certificates, and certifi- cate certificateĬate signing requests to import externally generated certificates and Certificate Revocation Lists U Generate private key with ACL limiting access to current user Private Key Format = PKCS1/PKCS8/FIPS186 default is PKCS1 (openssl)Įxtended Key Usage: a=Any s=SSL Client S=SSL Server m=SMIME Optional private key, for Import Certificate only Specify the keychain passphrase when creating Path is assumed otherwise, the specified filename is relative to the user's Library/Keychains If keychainName starts with a '/', an absolute Specify the Keychain to use for the operation.

Tificate d Display Certificate I Import CRL D Display CRL I Import a CRL y Display all certs and CRLsĬERTTOOL OPTION SUMMARY c Create the keychain, if one is needed.ĭ Create a CSR in DER format default is PEM SYNOPSIS certtool command certtool c certtool r outFileName cert- tool certtool tool v infileName certtool C domainName certtool i inFileName certtoolĭ inFileName certtool I inFileName certtool D inFileName certtool yĬERTTOOL COMMAND SUMMARY c Create keypair and Certificate r Create CSR v Verify CSR C Create a System Identity i Import Cer- tificate Certificate
