ownca make easy to handle a Certificate Authority (CA) and manage certificates for hosts or clients.

A high level usage is

>>> from ownca import CertificateAuthority
>>> ca = CertificateAuthority(ca_storage='/opt/CA', common_name='Corp CA')
>>> mycorp = ca.issue_certificate('mycorp', dns_names=['mycorp.com', 'tls.mycorp.com')

Basically in this three steps we did:

1. Imported the ownca Certificate Authority
2. Created a new CA name of Corp CA that uses /opt/CA as storage for CA certificates, keys and files.
3. We created signed certificates by Corp CA for server mycorp, the server files are also stored in /opt/CA/certs/mycorp.

More detailed usage can be found in http://ownca.readthedocs.org

pip install ownca