[Cryptography-dev] Creation and signing of X.509 certificates

[Paul Kehrer]

Yes, cryptography is capable of generating certificates as of version 1.0. There are some less common extensions not yet supported when creating certificates (name constraints and certificate policies) but everything else is supported. Check out https://cryptography.io/en/latest/x509/reference/#x-509-certificate-builder

-Paul Kehrer (reaperhulk)

On October 20, 2015 at 7:30:55 AM, Jesus Cea (jcea at jcea.es) wrote:

I wonder if current library release can create X.509 certificates as  
clients and CAs, and signing those certificates with a CA certificate  
(generated with cryptography library too).  

I want to drop OpenSSL for this activity for good!.  

--  
Jesús Cea Avión _/_/ _/_/_/ _/_/_/  
jcea at jcea.es - http://www.jcea.es/ _/_/ _/_/ _/_/ _/_/ _/_/  
Twitter: @jcea _/_/ _/_/ _/_/_/_/_/  
jabber / xmpp:jcea at jabber.org _/_/ _/_/ _/_/ _/_/ _/_/  
"Things are not so easy" _/_/ _/_/ _/_/ _/_/ _/_/ _/_/  
"My name is Dump, Core Dump" _/_/_/ _/_/_/ _/_/ _/_/  
"El amor es poner tu felicidad en la felicidad de otro" - Leibniz  

_______________________________________________  
Cryptography-dev mailing list  
Cryptography-dev at python.org  
https://mail.python.org/mailman/listinfo/cryptography-dev  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/cryptography-dev/attachments/20151020/037b1e1d/attachment.html>