Pek

terminal pki management tool using cfssl as a backend

usage

Install cfssl through your package manager

Place pek into a place of your choosing and add it to your shell paths

It is recommended to use $HOME/.local/bin

~/pki> pek gen server.lan
[INFO] Initializing pek...
[INFO] Generating new root CA
[INFO] Generated new root CA
[INFO] Generating new certificate for server.lan...
[INFO] Created certificate for server.lan
~/pki> pek list
root
server.lan
~/pki> pek export root
~/pki> pek export server.lan
~/pki> ls
pek-root.pem  server.lan-key.pem  server.lan.pem

These certificates may then be imported into your browser and configured with reverse proxies such as Caddy or Nginx

All commands

pek gen <cn>

Generate a cert/key pair for the given Common Name (CN)

pek rm <cn>

Remove the cert/key pair for the given CN

pek list

List all cert/key pairs available for export

pek export root

Export the pek root certficate, without the private key, into the current working directory as pek-root.pem

pek export <cn>

Export the certificate and private key for the given CN, if available, into the current working directory

pek reset

Delete root and all cert/key pairs