A simple certificate manager written in Go. Easy to use with limited capability.

etcd-ca allows you to build your own certificate system:

1. Create certificate authority
2. Create, issue and export host certificates
3. Manage host identities
4. Deploy a Public Key Infrastructure

Primarly used for coreos/etcd SSL/TLS testing.

etcd-ca inits a certificate authority, and issues certificates using the authority only. It indicates the length of authorization path is at most 2.

$ ./etcd-ca init
Created ca/key
Created ca/crt

$ ./etcd-ca new-cert alice
Created alice/key
Created alice/csr

$ ./etcd-ca sign alice
Created alice/crt from alice/csr signed by ca.key

$ ./etcd-ca chain alice
----BEGIN CERTIFICATE-----
CA certificate body
-----END CERTIFICATE-----
----BEGIN CERTIFICATE-----
alice certificate body
-----END CERTIFICATE-----

$ ./etcd-ca export alice > alice.tar

$ ./etcd-ca status
ca: WARN (60 days until expiration)
alice: OK (120 days until expiration)
bob: Unsigned

You can build etcd-ca from source:

$ git clone https://github.com/coreos/etcd-ca
$ cd etcd-ca
$ ./build

This will generate a binary called ./bin/etcd-ca

See CONTRIBUTING for details on submitting patches and contacting developers via IRC and mailing lists.

fleet is under the Apache 2.0 license. See the LICENSE file for details.