# Bindrune

Bindrune is a program for creating signed TLS certificates from TLS
private keys.

bindrune was created by Vi Grey <vi@vigrey.com>


## Description

Bindrune takes a path to a PEM encoded TLS private key file and prints
a matching TLS certificate to STDOUT.  The certificate can be either
self-signed or signed using a specified parent TLS certificate and
private key.  The USER_ID and COMMON_NAME fields in the certificate's
SUBJECT extension, the DNS records in the certificate's
SUBJECT_ALT_NAME extension, and the NOT_BEFORE and NOT_AFTER fields
can be manually set.


## Build Dependencies

- go


## Build

To build bindrune, use the following command in the root directory of
this repository

```
$ make
```

The resulting binary file will be located at `build/bin/bindrune`


## Usage

```
$ bindrune -h
Usage: bindrune [OPTIONS]... <keypath>

Options:
  -a, --notafter <timestamp>    RFC3339 Timestamp for TLS Not After
  -b, --notbefore <timestamp>   RFC3339 Timestamp for TLS Not Before
  -c, --cn <string>             TLS Certificate Common Name
  -d, --domains <string>        TLS Certificate User ID
  -f, --fingerprint             Print TLS Certificate fingerprint after
                                TLS Certificate is printed
  -h, --help                    Print Help (this message) and exit
  -k, --parentkey <path>        Path of signing TLS key file
  -p, --parentcert <path>       Path of signing TLS cert file
  -s, --selfsign                Self sign cert
  -u, --uid <string>            TLS Certificate User ID
  -v, --version                 Print version and exit
```