ol.clave.certificate.impl.keygen

Key generation utilities for creating keypairs to back TLS certificates.

Supports multiple key types for certificate signing: - ECDSA curves: P-256 (secp256r1), P-384 (secp384r1) - EdDSA: Ed25519 - RSA: 2048, 4096, and 8192 bit keys

Note: ACME account keys are managed separately via ol.clave.impl.crypto. This namespace is specifically for certificate keypairs.

supported-key-types

Set of supported key types for certificate keypair generation.


pem-encode

(pem-encode type der)

private-key→pem

(private-key->pem private-key)

gen-ed25519

(gen-ed25519)

gen-p256

(gen-p256)

gen-p384

(gen-p384)

gen-rsa2048

(gen-rsa2048)

gen-rsa4096

(gen-rsa4096)

gen-rsa8192

(gen-rsa8192)

generate

(generate key-type)