cert-ripper-go

cert-ripper is a command line tools that can be used to aid working with x509 certificates.

Currently, it offers the following features:

• fetch certificate chain from a host
• save certificates in different formats (PEM, DER, P7B, OpenSSL text)
• generate and decode certificate signing requests (CSR)
• generate self-signed certificates

Examples of Usage

• Fetch certificate chain:

cert-ripper print --url=ervinszilagyi.dev

• Generate a CSR:

cert-ripper request create --commonName ervinszilagyi.dev

• Decode a CSR:

cert-ripper request decode --path=csr.pem

• Generate a self-signed certificate:

cert-ripper generate fromstdio --commonName=ervinszilagyi.dev --validFrom="2023-05-09 15:04:05" --validFor=3600 --isCa

• Convert a certificate from .p7b format to .pem:

cert-ripper convert -s certs/pkcs.p7b -t certs/crt.pem

For more details about commands ands functionalities, please visit the documentation page.

Download and Install

MacOS

Install with homebrew:

brew tap recon-tools/homebrew-recon-tools
brew install cert-ripper

Debian/Ubuntu

ppa coming, for now download the executable from the release page

Windows/Other

Download the executable from the releases page: https://github.com/recon-tools/cert-ripper-go/releases

Building

Go 1.19 is required.

Linux/MacOS

go build -o target/cert-ripper

Windows

go build -o target/cert-ripper.exe

Build with ldflags

go build -ldflags "-X 'cert-ripper-go/cmd.appVersion=0.0.1'" -o target/cert-ripper

Tests

Running tests:

go test ./...