createSelfSignedCertificate¶

Canonical path: o6.util.createSelfSignedCertificate

createSelfSignedCertificate ¶

createSelfSignedCertificate(
    *,
    appUri="urn:open62541.server.application",
    commonName="Open62541Server@localhost",
    organization="o6",
    country="DE",
    altNames=None,
    expiresInDays=365,
    keySize=2048,
    fmt="DER"
)

Create a self-signed certificate and private key.

DNS:localhost and URI:<appUri> are always included as subject alternative names. Additional entries can be supplied via altNames.

Parameters:

Name	Type	Description	Default
`appUri`	`str`	Application URI embedded as a subject alternative name.	`'urn:open62541.server.application'`
`commonName`	`str`	Certificate subject common name.	`'Open62541Server@localhost'`
`organization`	`str`	Certificate subject organization.	`'o6'`
`country`	`str`	Two-letter certificate subject country code.	`'DE'`
`altNames`	`list[str] \| None`	Additional subject alternative names, such as `["DNS:myhost"]`.	`None`
`expiresInDays`	`int`	Certificate validity in days.	`365`
`keySize`	`int`	RSA key size in bits.	`2048`
`fmt`	`str`	Output format, either `"DER"` or `"PEM"`.	`'DER'`

Returns:

Type	Description
`tuple[bytes, bytes]`	A `(privateKey, certificate)` pair as raw bytes.