Conductor is an easy to use utility to generate self-signed Certificate Authority chains. Initially Conductor was written as a testing tool to easily generate certificates for testing TLS applications written in C, and for fun!

conductor server server.domain.tld -i 192.168.1.1 -d service.domain.tld

In a empty directory this will generate you a Certificate Authority Cert/Key, an Intermediate Certificate Authority Cert/Key, and a server x.509 cert/key and fullchain.

Next generate a user cert.

conductor user dan

It's that easy!

Conductor has a few prerequisites; make, flex, and bison. After those are install all you need to run is:

make

And you'll be able to run conductor right from the repo. Otherwise you can run:

sudo make install

And by default this will install to /usr/local/bin, of course this is configurable with PREFIX and DESTDIR.