A self-signing certificate authority manager - create your own certificate authority, and generate and manage SSL certificates.

It is a standalone shell script which uses OpenSSL to provide the following commands:

  • caman init - create the certificate authority
  • caman new <hostname> [oun] - add a host to caman
  • caman sign <hostname> - create a host certificate
  • caman renew <hostname> - renew a certificate
  • caman revoke <hostname> - revoke a certificate

For more information on how to use caman, see the full documentation on github.

If you want to understand how caman works internally, read the accompanying blog post.