Crypto modules

• certificate_complete_chain – Complete certificate chain given a set of untrusted and root certificates
• get_certificate – Get a certificate from a host:port
• luks_device – Manage encrypted (LUKS) devices
• openssh_cert – Generate OpenSSH host or user certificates
• openssh_keypair – Generate OpenSSH private and public keys
• openssl_certificate – Generate and/or check OpenSSL certificates
• openssl_certificate_info – Provide information of OpenSSL X.509 certificates
• openssl_csr – Generate OpenSSL Certificate Signing Request (CSR)
• openssl_csr_info – Provide information of OpenSSL Certificate Signing Requests (CSR)
• openssl_dhparam – Generate OpenSSL Diffie-Hellman Parameters
• openssl_pkcs12 – Generate OpenSSL PKCS#12 archive
• openssl_privatekey – Generate OpenSSL private keys
• openssl_privatekey_info – Provide information for OpenSSL private keys
• openssl_publickey – Generate an OpenSSL public key from its private key

Acme

• acme_account – Create, modify or delete ACME accounts
• acme_account_info – Retrieves information on ACME accounts
• acme_certificate – Create SSL/TLS certificates with the ACME protocol
• acme_certificate_revoke – Revoke certificates with the ACME protocol
• acme_challenge_cert_helper – Prepare certificates required for ACME challenges such as tls-alpn-01
• acme_inspect – Send direct requests to an ACME server

Entrust

• ecs_certificate – Request SSL/TLS certificates with the Entrust Certificate Services (ECS) API

Note

• (D): This marks a module as deprecated, which means a module is kept for backwards compatibility but usage is discouraged. The module documentation details page may explain more about this rationale.