Igor Certificate Authority

{% if pluginData.ca %}

This Igor uses the Certificate Authority of another Igor, located at {{pluginData.ca}}.

{% else %}

This Igor serves as its own certificate authority.

{% endif %}

To change this, add an entry ca to /data/plugindata/{{pluginName}} (or remove that entry) and reboot igor.

Root Certificate Chain

To trust certificates signed by this Igor CA, download the root certificate chain and install in your browser or system.

If available, the Certificate Revocation List can be downloaded too.

Listing all Certificates

To list certificates signed by this Igor CA, see the certificate listing.

Revocation user interface is not implemented yet.

Signing a certificate

Create a key and CSR (Certificate Signing Request) locally, possibly using the igorCA csr command (user interface not implemented yet).

Enter the CSR in PEM for in the following field and submit:


The result is the (PEM-encoded) certificate you can use for your service (together with the key from the igorCA csr step).

Creating a key and certificate

You can also have the Igor CA module do all of the steps above for you: create a key, create a CSR and sign it. You will get the private key and certificate as a result (encoded in DER form and concatenated).

Note that Igor does not keep a copy of the key, it is only returned to you (and used to sign the CSR). You must keep the key safe once you have received it.

Enter hostnames (canonical name first), one per line:

Key size:

Revoking a certificate

Look up the certificate sequence number (a hexadecimal string) in the certificate listing. Enter the number in the form below to revoke it:

Certificate sequence number:

Return to Igor homepage

{% if 'returnTo' in kwargs %}

Return to {{kwargs['returnTo']}}.

{% endif %}