README.md

Vault2Cert

It requests a SSL certificate from a HashiCorp vault server and stores it to either PEM files or JKS keystore.

Compiling

go mod tidy
go build -o vault2cert main.go

Usage

export VAULT_ADDR='http://127.0.0.1:8200'
export VAULT_TOKEN=root

./vault2cert --mount pki --common-name hello.example.com --role=test --write-to /tmp

This will write the PEM files to /tmp

export VAULT_ADDR='http://127.0.0.1:8200'
export VAULT_TOKEN=root

./vault2cert --mount pki --common-name hello.example.com --role=test --jks /tmp/hello.jks --jkspassword=changeme

Same as before but store the keys in JKS