winpr-makecert(1)

📦
version 3.32.1 · 5 versions
, in ubuntu noble

💖 winpr-makecert — the FreeRDP cert-making bestie 💖

okay so you know winpr-makecert(1)? that's the manual page we're vibing with rn, and it's literally a tool for making X.509 certificates. let's get into it ✨

✨ NAME ✨

winpr-makecert — a whole tool whose entire job is creating X.509 certificates. she's giving certificate factory, no cap 🎀

🌸 SYNOPSIS 🌸

winpr-makecert [-rdp] [-silent] [-live] [-format { crt | pem | pfx }]
[-p password] [-n common_name] [-y years] [-m months] [-len length] [-#
serial] [-a { md5 | sha1 | sha256 | s384 | sha512 }] [-path outputpath]
[outputname]

🦋 DESCRIPTION 🦋

so winpr-makecert is a tool for generating X.509 certificates, and it's modeled after the Windows command MakeCert. the goal?? be command line compatible with MakeCert — but bestie, not all the options are supported or implemented yet 🙈 lowkey a work in progress and that's okay.

unimplemented features are not described on this page. they're marked as "Unsupported" in winpr-makecerts help. so if you don't see it here, that's why 💅

in contrast to its Windows counterpart, winpr-makecert does — unless the -live option is given — always create and save a certificate. fr fr, always. and if outputname isn't set, it tries to determine the host name of the computer the command is run on. cute, right? 🫶

⚠️ Warning: if the file already exists it will be overwritten without asking. no vibe check, no "are you sure", just gone. 😭

without any further options, the generated certificates have these properties, periodt:

  • 2048 bit long
  • sha256 as hash algorithm
  • the detected host name is used as common name
  • a time stamp is used as serial number
  • validity period of one year
  • saved in the current working directory in crt format

💅 OPTIONS 💅

  • -rdp — a dummy parameter. can be used to quickly generate a certificate with default properties without specifying any further parameters. it's giving "just do the thing" energy ⭐
  • -silent — don't print the generated certificate to stdout. she's shy 🤫
  • -f format — three formats are supported: crt, pem and pfx.
    • crt outputs the key and the certificate in a separate file each, with the file endings .key and .crt.
    • pem outputs the key and certificate into a single file with the file ending pem.
    • and pfx outputs key and certificate into a pkcs12 file with the ending .pfx. (note: the synopsis writes this one as -format { crt | pem | pfx }, same thing bestie 💖)
  • -p password — password to use if the pfx format is used as format. 🔐
  • -live — don't write the key/certificate to disk. when used from the command line this can be thought of as "dummy" mode. look but don't touch 🧚
  • -n common_name — the common name to use in the certificate.
  • -m months — validity period in months (multiple of 31 days, not calendar months). math girlies rise 👑
  • -y years — validity period in years (365 days, leap years not accounted). if months and years are specified the specified values are accumulated. stacking them like bracelets 🌈
  • -len length — key length in bits to use.
  • -a { md5 | sha1 | sha256 | s384 | sha512 } — the hashing algorithm to use. (yes, s384 exactly as written, don't @ me 💀)
  • -# serial — the serial number to use for the certificate.
  • -path — a directory where the certificate should be created in. 📁
  • outputname — the base name of the created file(s). a suffix, the format specific suffix, is appended to this name.

🎀 EXAMPLES 🎀

winpr-makecert -rdp

creates a certificate with the default properties, saved to a file in the current working directory in crt format named like the host. if the host is named freerdp the created files are called freerdp.key and freerdp.crt. obsessed ✨

winpr-makecert -len 4096 -a sha384 -path /tmp -# 22 -m 144 -y 1 -format
crt mycert

the command above creates the file /tmp/mycert.pem containing a key and a certificate with a length of 4096. it will use sha384 as hash algorithm. the certificate has the serial number 22 and is valid for 12 years (144 months). she ate 🔥

⭐ EXIT STATUS ⭐

  • 0 — successful program execution. slay 💅
  • 1 — otherwise. 💀

🌈 SEE ALSO 🌈

👑 AUTHOR 👑

  • FreeRDP <team@freerdp.com>

and that's the whole page bestie 🫶 this was winpr-makecert(1) from FreeRDP, version 3.32.1, dated 2017-01-11 — ily, go make some certs, and don't let anything overwrite your files without asking 🎀✨💖

📦 where this page comes from