5

For development and local intranet purposes I am trying to find a decent and free x509 certificate generator. I know there is makecert.exe which is available with the .NET Fx SDK, but I have tried using it and have run into seemingly inexplicable problems.

So are there any free and easy-to-use x509 cert generators which folks can recommend?

Improve this question
  • I assume you're looking for such software that runs on Windows? – Undo Jun 5 '14 at 3:30
  • Yes, your assumption is correct: Windows. – Cyberherbalist Jun 5 '14 at 3:50
  • I have always used TinyCA for that, but a) I'm on Linux, b) I'm not sure whether it's available for Windows, and c) looks like the project has died (projectsite is gone, no update since ~2010 if I checked correctly). But it does its job for me. // Wikipedias X.509 article mentions SSLTools Manager for Windows instead, might be worth a look. – Izzy♦ Jun 5 '14 at 7:34
1

I have used XCA for this purpose. It's a complete GUI for managing certificates, keys, signing request and even a production-grade CA.

  • Free and open source
  • Multi-platform (Windows, Linux, Mac)
  • Provides generation of private keys, self-signed certificates, signing request and CRLs
  • Optionally used to manage a whole CA signing authority

I've used myself for testing and home use (nothing serious really), so I'm confident that it fits that purpose. Their site seems to indicate that it can also be used for production uses too.

Improve this answer
1

You can do this with OpenSSL. It will run on Windows.

Directions are here.

This question also shows how.

Improve this answer
  • I hope they've fixed the Heartbleed thing!!! :-) – Cyberherbalist Jun 6 '14 at 17:44
  • @Cyberherbalist Yeah. :-) If you get a new version, you'll be fine. It was a simple coding error. The big problem was folks have bad versions embedded into devices and servers that most don't think to update. – kmort Jun 6 '14 at 17:50

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.