Manage Cockpit's SSL certificate. If used without options will check if cockpit has a valid certificate without making any changes.

--ensure Ensure that a certificate exists and can be loaded. If none exists, create a 0-self-signed.cert certificate, using sscg[1] (if available) or openssl[2]. That self-signed default certificate will be automatically renewed when it expires.

--user username The unix user that should own the certificate. Only takes effect if used with --ensure.

--group groupname The unix group that should read the certificate. Only takes effect if used with --ensure.

If any additional arguments are given, they are treated as files that should be combined to create a certificate file. If the combined files validate, they will be saved in the appropriate location using the name of the first file given with the extension changed to .cert. For example:

remotectl certificate server.pem chain.pem key.pem

will result in server.cert. If server.cert already exists it will be overwritten.

Show help options.

Print verbose messages about the task

https://github.com/sgallagher/sscg

https://linux.die.net/man/1/openssl

https://github.com/cockpit-project/cockpit/issues/new

https://github.com/cockpit-project/cockpit/