lupaxa-certtool 0.1.0__tar.gz

lupaxa_certtool-0.1.0/.gitignore

@@ -0,0 +1,206 @@
+###############################################################################
+# LUPAXA STANDARD .gitignore
+# Sensible defaults for Python + tooling + docs, without being over the top.
+###############################################################################
+
+###############################################################################
+# Python bytecode / cache
+###############################################################################
+__pycache__/
+*.py[cod]
+*.pyo
+*.pyd
+*.so
+
+###############################################################################
+# Build & packaging outputs
+###############################################################################
+build/
+dist/
+wheelhouse/
+*.egg-info/
+*.egg
+*.whl
+pip-wheel-metadata/
+.eggs/
+
+###############################################################################
+# Virtual environments
+###############################################################################
+venv/
+.env/
+.venv/
+env/
+ENV/
+.conda/
+.python-version  # pyenv / asdf local version file
+
+###############################################################################
+# Hatch, Poetry, Pipenv, PDM, Rye, etc.
+###############################################################################
+.hatch/
+.poetry/
+pipenv-files/
+pdm.lock
+pdm.toml
+rye.lock
+
+###############################################################################
+# Secrets, credentials, tokens, auth files
+###############################################################################
+# Keep this focused so we don’t explode on every directory name.
+*.env
+*.env.*
+.envrc
+*.secret
+*.secrets
+*.credentials
+*.tokens
+vault.json
+*.gpg
+*.asc
+*.pgp
+
+###############################################################################
+# Certificate / key outputs (runtime artefacts, not source)
+###############################################################################
+*.pem
+*.der
+*.csr
+*.key
+*.crt
+*.pfx
+*.cer
+*.jwk
+*.keystore
+
+# Common output dirs for generated certs/keys
+certs*/
+keys*/
+output*/
+generated*/
+
+###############################################################################
+# Logs, dumps, traces
+###############################################################################
+*.log
+*.audit
+*.trace
+*.out
+*.err
+*.dump
+*.stackdump
+*.core
+core.*
+
+###############################################################################
+# Test artefacts and temporary test outputs
+###############################################################################
+tests/tmp*/
+tests/output*/
+tests/**/assets*/
+coverage.xml
+htmlcov/
+.coverage*
+.nox/
+.tox/
+
+###############################################################################
+# Tooling caches: Ruff, mypy, pytest, pip, coverage, etc.
+###############################################################################
+.ruff_cache/
+.mypy_cache/
+.pytest_cache/
+.cache/
+pytestdebug.log
+pip-log.txt
+
+# Temporary audit venv used by Makefile
+.audit-env/
+
+###############################################################################
+# Documentation — MkDocs, Sphinx, etc.
+###############################################################################
+# MkDocs static site output
+site/
+
+# Other doc build outputs
+docs/_build/
+docs/build/
+docs/.cache/
+docs/.benchmarks/
+
+###############################################################################
+# IDE Junk: VSCode, JetBrains, Sublime, etc.
+###############################################################################
+# VS Code
+.vscode/
+!.vscode/settings.json
+!.vscode/extensions.json
+
+# JetBrains
+.idea/
+*.iml
+
+# Sublime
+*.sublime-project
+*.sublime-workspace
+
+# Other editors
+*.swp
+*.swo
+
+###############################################################################
+# OS Junk
+###############################################################################
+# macOS
+.DS_Store
+.AppleDouble
+.LSOverride
+Icon?
+._*
+
+# Windows
+Thumbs.db
+ehthumbs.db
+Desktop.ini
+$RECYCLE.BIN/
+
+###############################################################################
+# Temporary & generated files
+###############################################################################
+tmp/
+temp/
+*.tmp
+*.temp
+*.bak
+*.backup
+*.orig
+*.old
+
+# Editors
+*~
+*.autosave
+
+###############################################################################
+# Local-only configuration files
+###############################################################################
+*.local
+*.override
+*.user
+*.machine
+config.local.*
+settings.local.*
+
+###############################################################################
+# Docker containers, images, volumes
+###############################################################################
+docker/
+docker-compose.override.yml
+
+###############################################################################
+# Git metadata overrides
+###############################################################################
+git-*.sh
+*.diff
+*.patch

lupaxa_certtool-0.1.0/PKG-INFO

@@ -0,0 +1,272 @@
+Metadata-Version: 2.4
+Name: lupaxa-certtool
+Version: 0.1.0
+Summary: A Python toolkit and CLI for generating self-signed certificates, CSRs, and private keys.
+Project-URL: Homepage, https://github.com/lupaxa-security-toolbox/certtool
+Project-URL: Documentation, https://lupaxa-security-toolbox.github.io/certtool/
+Project-URL: Repository, https://github.com/lupaxa-security-toolbox/certtool
+Project-URL: Issues, https://github.com/lupaxa-security-toolbox/certtool/issues
+Author: The Lupaxa Project
+License: MIT
+License-File: LICENSE
+Keywords: automation,certificate,cryptography,csr,ssl,x509
+Classifier: Environment :: Console
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Topic :: Security :: Cryptography
+Classifier: Topic :: Utilities
+Requires-Python: >=3.10
+Requires-Dist: cryptography>=43.0.0
+Provides-Extra: dev
+Requires-Dist: bump-my-version>=1.2.0; extra == 'dev'
+Requires-Dist: mkdocs-material>=9.5.0; extra == 'dev'
+Requires-Dist: mkdocs>=1.6.0; extra == 'dev'
+Requires-Dist: mypy>=1.12.0; extra == 'dev'
+Requires-Dist: pip-audit>=2.7.0; extra == 'dev'
+Requires-Dist: pytest-cov>=5.0; extra == 'dev'
+Requires-Dist: pytest>=8.0; extra == 'dev'
+Requires-Dist: ruff>=0.6.0; extra == 'dev'
+Requires-Dist: types-setuptools; extra == 'dev'
+Provides-Extra: test
+Requires-Dist: pytest-cov>=5.0; extra == 'test'
+Requires-Dist: pytest>=8.0; extra == 'test'
+Description-Content-Type: text/markdown
+
+<!-- markdownlint-disable -->
+<p align="center">
+  <a href="https://github.com/lupaxa-security-toolbox">
+    <img src="https://raw.githubusercontent.com/the-lupaxa-project/org-logos/master/orgs/security-toolbox/readme-logo.png" alt="Project Logo" width="256"/><br/>
+  </a>
+  The Lupaxa Security Toolbox.<br />
+  Part of The Lupaxa Project.
+</p>
+
+# lupaxa-certtool
+
+A clean, modern, fully-typed Python CLI and library for generating **self-signed X.509 certificates**, **certificate signing requests (CSRs)**, and **private keys**.
+
+Built for automation, reproducibility, and bulk-generation workflows used by The Lupaxa Project.
+
+## Features
+
+- Generate **self-signed certificates**, **private keys**, and **CSRs**
+- Generate from:
+  - **JSON config file**
+  - **Directory of config files** (bulk mode)
+  - **Pure command-line flags**
+- Output:
+  - To **stdout**
+  - Or into an **output directory**, with one folder per certificate
+- Supports:
+  - RSA key generation
+  - SHA-256 / SHA-384 / SHA-512 digests
+  - Validity period configuration
+  - Optional **private key encryption** with passphrase
+  - **Subject Alternative Names (SANs)** via JSON or CLI
+- Includes:
+  - `--generate-example` to produce a full example JSON config
+  - `--inspect-cert` to analyze existing PEM certificates
+  - `--validate-config` to validate config files before use
+- Fully typed, linted, formatted, and tested
+- MkDocs documentation included
+
+## Installation
+
+### From PyPI
+
+```bash
+pip install lupaxa-certtool
+```
+
+### From source (development mode)
+
+```bash
+pip install -e ".[dev]"
+```
+
+## Usage
+
+### Basic self-signed certificate from CLI
+
+```bash
+certtool \
+  --countryName UK \
+  --stateOrProvinceName Somerset \
+  --localityName Glastonbury \
+  --organizationName "Lupaxa Project" \
+  --commonName "example.local"
+  ```
+
+## Using JSON Configuration
+
+### Generate an example config
+
+```bash
+certtool --generate-example --example-file example-cert.json
+```
+
+### Use a JSON config file
+
+```bash
+certtool --config example-cert.json
+```
+
+### Use a directory of configs (bulk mode)
+
+```bash
+certtool --config-dir configs/
+```
+
+## Output Directory Structure
+
+If you pass:
+
+```bash
+certtool --config-dir configs/ --output-dir output/
+```
+
+You get:
+
+```bash
+output/
+├── example.local/
+│   ├── cert.pem
+│   ├── csr.pem
+│   └── key.pem
+└── api.internal/
+    ├── cert.pem
+    ├── csr.pem
+    └── key.pem
+```
+
+Each certificate gets its own folder to prevent overwriting.
+
+## Private Key Encryption
+
+### JSON
+
+```bash
+{
+  "passphrase": "your-secret-here"
+}
+```
+
+### CLI (overrides JSON)
+
+```bash
+certtool --config server.json --passphrase "some-secret"
+```
+
+## Inspect a Certificate
+
+```bash
+certtool --inspect-cert output/example.local/cert.pem
+```
+
+## Development
+
+### Run tests
+
+```bash
+make test
+```
+
+### Type checking
+
+```bash
+make type
+```
+
+### Lint, format, and style checks
+
+```bash
+make check-style
+```
+
+### Run everything
+
+```bash
+make check-all
+```
+
+### Build documentation
+
+```bash
+mkdocs serve
+```
+
+## Documentation
+
+The project includes MkDocs documentation.
+
+### Online documentation:
+
+[Documentation](https://lupaxa-security-toolbox.github.io/certtool/)
+
+Full documentation is available in the docs/ directory or served locally:
+
+### Serve docs locally
+
+```bash
+mkdocs serve
+```
+
+Then open the printed URL (usually http://127.0.0.1:8000/) in your browser.
+
+## Development
+
+Clone the repository and install dev dependencies:
+
+```bash
+pip install -e ".[dev]"
+```
+
+Useful make targets:
+
+```bash
+make test        # run tests
+make type        # type checking (mypy)
+make check-style # lint + format + type
+make check-all   # run tests, coverage, and audit
+```
+
+## Repository Layout
+
+```bash
+lupaxa-certtool/
+├── src/lupaxa/certtool/
+│   ├── cli.py
+│   ├── certs.py
+│   ├── utils.py
+│   ├── config.py
+│   ├── example.py
+│   ├── exceptions.py
+│   ├── version.py
+│   └── __init__.py
+├── docs/
+├── tests/
+├── mkdocs.yml
+├── Makefile
+├── pyproject.toml
+├── .editorconfig
+├── .gitignore
+└── README.md
+```
+<h1></h1>
+
+<p align="center">
+    <strong>
+        &copy; The Lupaxa Project.
+    </strong>
+    <br />
+    <em>
+        Where exploration meets precision.<br />
+        Where the untamed meets the engineered.
+    </em>
+</p>
+

lupaxa_certtool-0.1.0/README-PYPI.md

@@ -0,0 +1,233 @@
+<!-- markdownlint-disable -->
+<p align="center">
+  <a href="https://github.com/lupaxa-security-toolbox">
+    <img src="https://raw.githubusercontent.com/the-lupaxa-project/org-logos/master/orgs/security-toolbox/readme-logo.png" alt="Project Logo" width="256"/><br/>
+  </a>
+  The Lupaxa Security Toolbox.<br />
+  Part of The Lupaxa Project.
+</p>
+
+# lupaxa-certtool
+
+A clean, modern, fully-typed Python CLI and library for generating **self-signed X.509 certificates**, **certificate signing requests (CSRs)**, and **private keys**.
+
+Built for automation, reproducibility, and bulk-generation workflows used by The Lupaxa Project.
+
+## Features
+
+- Generate **self-signed certificates**, **private keys**, and **CSRs**
+- Generate from:
+  - **JSON config file**
+  - **Directory of config files** (bulk mode)
+  - **Pure command-line flags**
+- Output:
+  - To **stdout**
+  - Or into an **output directory**, with one folder per certificate
+- Supports:
+  - RSA key generation
+  - SHA-256 / SHA-384 / SHA-512 digests
+  - Validity period configuration
+  - Optional **private key encryption** with passphrase
+  - **Subject Alternative Names (SANs)** via JSON or CLI
+- Includes:
+  - `--generate-example` to produce a full example JSON config
+  - `--inspect-cert` to analyze existing PEM certificates
+  - `--validate-config` to validate config files before use
+- Fully typed, linted, formatted, and tested
+- MkDocs documentation included
+
+## Installation
+
+### From PyPI
+
+```bash
+pip install lupaxa-certtool
+```
+
+### From source (development mode)
+
+```bash
+pip install -e ".[dev]"
+```
+
+## Usage
+
+### Basic self-signed certificate from CLI
+
+```bash
+certtool \
+  --countryName UK \
+  --stateOrProvinceName Somerset \
+  --localityName Glastonbury \
+  --organizationName "Lupaxa Project" \
+  --commonName "example.local"
+  ```
+
+## Using JSON Configuration
+
+### Generate an example config
+
+```bash
+certtool --generate-example --example-file example-cert.json
+```
+
+### Use a JSON config file
+
+```bash
+certtool --config example-cert.json
+```
+
+### Use a directory of configs (bulk mode)
+
+```bash
+certtool --config-dir configs/
+```
+
+## Output Directory Structure
+
+If you pass:
+
+```bash
+certtool --config-dir configs/ --output-dir output/
+```
+
+You get:
+
+```bash
+output/
+├── example.local/
+│   ├── cert.pem
+│   ├── csr.pem
+│   └── key.pem
+└── api.internal/
+    ├── cert.pem
+    ├── csr.pem
+    └── key.pem
+```
+
+Each certificate gets its own folder to prevent overwriting.
+
+## Private Key Encryption
+
+### JSON
+
+```bash
+{
+  "passphrase": "your-secret-here"
+}
+```
+
+### CLI (overrides JSON)
+
+```bash
+certtool --config server.json --passphrase "some-secret"
+```
+
+## Inspect a Certificate
+
+```bash
+certtool --inspect-cert output/example.local/cert.pem
+```
+
+## Development
+
+### Run tests
+
+```bash
+make test
+```
+
+### Type checking
+
+```bash
+make type
+```
+
+### Lint, format, and style checks
+
+```bash
+make check-style
+```
+
+### Run everything
+
+```bash
+make check-all
+```
+
+### Build documentation
+
+```bash
+mkdocs serve
+```
+
+## Documentation
+
+The project includes MkDocs documentation.
+
+### Online documentation:
+
+[Documentation](https://lupaxa-security-toolbox.github.io/certtool/)
+
+Full documentation is available in the docs/ directory or served locally:
+
+### Serve docs locally
+
+```bash
+mkdocs serve
+```
+
+Then open the printed URL (usually http://127.0.0.1:8000/) in your browser.
+
+## Development
+
+Clone the repository and install dev dependencies:
+
+```bash
+pip install -e ".[dev]"
+```
+
+Useful make targets:
+
+```bash
+make test        # run tests
+make type        # type checking (mypy)
+make check-style # lint + format + type
+make check-all   # run tests, coverage, and audit
+```
+
+## Repository Layout
+
+```bash
+lupaxa-certtool/
+├── src/lupaxa/certtool/
+│   ├── cli.py
+│   ├── certs.py
+│   ├── utils.py
+│   ├── config.py
+│   ├── example.py
+│   ├── exceptions.py
+│   ├── version.py
+│   └── __init__.py
+├── docs/
+├── tests/
+├── mkdocs.yml
+├── Makefile
+├── pyproject.toml
+├── .editorconfig
+├── .gitignore
+└── README.md
+```
+<h1></h1>
+
+<p align="center">
+    <strong>
+        &copy; The Lupaxa Project.
+    </strong>
+    <br />
+    <em>
+        Where exploration meets precision.<br />
+        Where the untamed meets the engineered.
+    </em>
+</p>
+