Fulltext results:
- Generate a Test Key
- ====== Generate a Test Key ====== openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout testkey.key -out testkey.crt Informations about the used arguments from the OpenSSL man... l.org/docs/apps/req.html|req]]'': PKCS#10 certificate request and certificate generating utility. * ''[[http://www.openssl.org/docs/apps/req.html#item__
- Debug Server Certificate from Client
- ====== Debug Server Certificate from Client ====== Credit for this example goes to "[[http://langui.sh/2009/03/14/checking-a-remote-certificate-chain-with-openssl/| Checking A Remote Certificate Chain With OpenSSL]]" from [[http://langui.sh/|la... nt -showcerts -connect www.andunix.net:443 Informations about the used arguments from the OpenSSL man
- Download a Server Certificate
- ====== Download a Server Certificate ====== First, load the certificate chain from the server: <code bash> openssl s_client -showcerts ... /code> This will output the whole server certificate chain. Every chertificate ist wrapped between ''-----BEGIN CERTIFICATE-----'' and ''-----END CERTIFI
- Print Information about a Key
- ====== Print Information about a Key ====== openssl x509 -inform DER -in testkey.cer -noout -text Informations about the used arguments from the OpenSSL man... openssl.org/docs/apps/x509.html|x509]]'': Certificate display and signing utility. * ''[[http://www.... orm|-inform DER]]'': This specifies the input format normally the command will expect an X509 certific
- Print all certificates in a file
- ====== Print all certificates in a file ====== This command is especially helpful if you want to use Tomcat-/Java-Keystore-Certificates with the Apache webserver. Use the -print_certs to print all the certificates and then cut the file and store each certificat
- Print Information about a Certificate
- ====== Print Information about a Certificate ====== openssl x509 -in testkey.crt -noout -text Informations about the used arguments from the OpenSSL man... openssl.org/docs/apps/x509.html|x509]]'': Certificate display and signing utility. * ''[[http://www.
- Compare a Key with its Certificate
- ====== Compare a Key with its Certificate ====== Credit for this example goes to "[[https://kb.wisc.edu/middleware/page.php?id=4064|Verifying that a Private Key Matches a Certificate]]" from the [[https://kb.wisc.edu/|University of Wisconsin Knowledgebase]]
- Convert a Key
- -inkey key.pem -out key.p12 ===== Export Certificate from P12 ===== Export the certificate with the complete certificate chain: openssl pkcs12 -in testkey.p12 -out testkey.pem -nokeys Export the certificate only: openssl pkcs12 -in testkey.p12 -out test
- Print Information about a Signature
- ====== Print Information about a Signature ====== <code bash> openssl pkcs7 -in signature.p7s -text -inform DER -print_certs -noout </code>
- Convert a Certificate
- ====== Convert a Certificate ====== ===== Convert DER to PEM ===== openssl x509 -inform der -in te... -outform der -in testkey.pem -out testkey.der {{tag>openssl security cryptography certificate howto}}