NAME

       winpr-makecert - A tool to create X.509 certificates.

SYNOPSIS

       winpr-makecert  [-rdp] [-silent] [-live] [-format { crt | pem | pfx }] [-p password] [-n common_name] [-y
       years] [-m months] [-len length] [-# serial] [-a { md5 |  sha1  |  sha256  |  s384  |  sha512  }]  [-path
       outputpath] [outputname]

DESCRIPTION

       winpr-makecert  is  a  tool for generating X.509 certificates modeled after the Windows command MakeCert.
       winpr-makecert aims to be command line compatible with MakeCert however not all options are supported  or
       implemented yet.

       Unimplemented features are not described here. They are marked as "Unsupported" in winpr-makecerts help.

       In  contrast  to  it's  Windows counterpart winpr-makecert does, unless the -live option is given, always
       creates and save a certificate.  If outputname isn't set it is tried to determine the host  name  of  the
       computer the command is run on.
       Warning: if the file already exists it will be overwritten without asking.

       Without further options the generated certificates have the following properties:

       * 2048 bit long
       * sha256 as hash algorithm
       * the detected host name is used as common name
       * a time stamp is used as serial number
       * validity period of one year
       * saved in the current working directory in crt format

OPTIONS

       -rdp   Dummy  parameter.  Can  be  used to quickly generate a certificate with default properties without
              specifying any further parameters.

       -silent
              Don't print the generated certificate to stdout.

       -f format
              Three formats are supported: crt, pem and pfx.
              crt outputs the key and the certificate in a separate file each with the  file  endings  .key  and
              .crt.
              pem outputs the key and certificate into a single file with the file ending pem.
              And pfx outputs key and certificate into a  pkcs12 file with the ending .pfx.

       -p password
              Password to use if the pfx format is used as format.

       -live  Don't  write  the  key/certificate to disk. When used from the command line this can be thought as
              "dummy" mode.

       -n common_name
              The common name to use in the certificate.

       -m months
              Validity period in months.

       -y years
              Validity period in years. If months and years are specified the  specified  month  parameter  will
              take precedence.

       -len length
              Key length in bits to use.

       -a { md5 | sha1 | sha256 | s384 | sha512 }
              The hashing algorithm to use.

       -# serial
              The serial number to use for the certificate.

       -path  A directory where the certificate should be created in.

       outputname
              The  base  name  of  the created file(s). A suffix, the format specific suffix is appended to this
              name.

EXAMPLES

       winpr-makecert -rdp

       Creates a certificate with the default properties, saved to a file in the current  working  directory  in
       crt format named like the host. If the host is named freerdp the created files are called freerdp.key and
       freerdp.crt.

       winpr-makecert -len 4096 -a sha384 -path /tmp -# 22 -m 144 -y 1 -format crt mycert

       The command above creates the file /tmp/mycert.pem containing a key and a certificate with  a  length  of
       4096. It will use sha384 as hash algorithm.  The certificate has the serial number 22 and is valid for 12
       years (144 months).

EXIT STATUS

       0      Successful program execution.

       1      Otherwise.

SEE ALSO

       MakeCert help page ⟨https://msdn.microsoft.com/library/windows/desktop/aa386968.aspx⟩

AUTHOR

       FreeRDP <team@freerdp.com>