Yes, cryptography is capable of generating certificates as of version 1.0. 
There are some less common extensions not yet supported when creating 
certificates (name constraints and certificate policies) but everything else is 
supported. Check out 
https://cryptography.io/en/latest/x509/reference/#x-509-certificate-builder

-Paul Kehrer (reaperhulk)

On October 20, 2015 at 7:30:55 AM, Jesus Cea (j...@jcea.es) wrote:

I wonder if current library release can create X.509 certificates as  
clients and CAs, and signing those certificates with a CA certificate  
(generated with cryptography library too).  

I want to drop OpenSSL for this activity for good!.  

--  
Jesús Cea Avión _/_/ _/_/_/ _/_/_/  
j...@jcea.es - http://www.jcea.es/ _/_/ _/_/ _/_/ _/_/ _/_/  
Twitter: @jcea _/_/ _/_/ _/_/_/_/_/  
jabber / xmpp:j...@jabber.org _/_/ _/_/ _/_/ _/_/ _/_/  
"Things are not so easy" _/_/ _/_/ _/_/ _/_/ _/_/ _/_/  
"My name is Dump, Core Dump" _/_/_/ _/_/_/ _/_/ _/_/  
"El amor es poner tu felicidad en la felicidad de otro" - Leibniz  

_______________________________________________  
Cryptography-dev mailing list  
Cryptography-dev@python.org  
https://mail.python.org/mailman/listinfo/cryptography-dev  
_______________________________________________
Cryptography-dev mailing list
Cryptography-dev@python.org
https://mail.python.org/mailman/listinfo/cryptography-dev

Reply via email to