Fulltext results:

Debug Server Certificate from Client

14 Hits, Last modified: 11 years ago

====== Debug Server Certificate from Client ====== Credit for this example goes to "[[http://langui.sh/2009/03/14/checking-a-remote-certificate-chain-with-openssl/| Checking A Remote Certificate Chain With OpenSSL]]" from [[http://langui.sh/|langui.sh]].... howcerts|-showcerts]]'': display the whole server certificate chain: normally only the server certificate itsel

Download a Server Certificate

12 Hits, Last modified: 10 years ago

====== Download a Server Certificate ====== First, load the certificate chain from the server: <code bash> openssl s_client -showcerts -connect w... v/null </code> This will output the whole server certificate chain. Every chertificate ist wrapped between ''-----BEGIN CERTIFICATE-----'' and ''-----END CERTIFICATE-----''. The fir

Generate a Test Key

9 Hits, Last modified: 10 years ago

w.openssl.org/docs/apps/req.html|req]]'': PKCS#10 certificate request and certificate generating utility. * ''[[http://www.openssl.org/docs/apps/req.html#item__x509|-x509]]'': this option outputs a self signed certificate instead of a certificate request. This is typically used to generate a test certificate or a self signed root

Print all certificates in a file

5 Hits, Last modified: 12 years ago

====== Print all certificates in a file ====== This command is especially helpful if you want to use Tomcat-/Java-Keystore-Certificates with the Apache webserver. Use the -print_certs to print all the certificates and then cut the file and store each certificate in a single file. openssl pkcs7 -in file.pem -print_cert

Print Information about a Key

5 Hits, Last modified: 10 years ago

p://www.openssl.org/docs/apps/x509.html|x509]]'': Certificate display and signing utility. * ''[[http://www.o... t format normally the command will expect an X509 certificate but this can change if other options such as -req... resent. The DER format is the DER encoding of the certificate and PEM is the base64 encoding of the DER encodin... ]]'': This specifies the input filename to read a certificate from or standard input if this option is not spec

Compare a Key with its Certificate

4 Hits, Last modified: 12 years ago

====== Compare a Key with its Certificate ====== Credit for this example goes to "[[https://kb.wisc.edu/middle... hp?id=4064|Verifying that a Private Key Matches a Certificate]]" from the [[https://kb.wisc.edu/|University of ... ]. To see if a key ''server.key'' belongs to the certificate ''server.crt'', they need to have the same "modul... rver.key: (stdin)= 91cc0cf512b528689960a9fbd42bdabe </file> {{tag>openssl cryptography key certificate howto}}

Convert a Key

4 Hits, Last modified: 6 years ago

ert.pem -inkey key.pem -out key.p12 ===== Export Certificate from P12 ===== Export the certificate with the complete certificate chain: openssl pkcs12 -in testkey.p12 -out testkey.pem -nokeys Export the certificate only: openssl pkcs12 -in testkey.p12 -out testk

Print Information about a Certificate

4 Hits, Last modified: 9 years ago

====== Print Information about a Certificate ====== openssl x509 -in testkey.crt -noout -text Informations ... p://www.openssl.org/docs/apps/x509.html|x509]]'': Certificate display and signing utility. * ''[[http://www.o... ]]'': This specifies the input filename to read a certificate from or standard input if this option is not spec... ps/x509.html#item__text|-text]]'': prints out the certificate in text form. Full details are output including t

Convert a Certificate

2 Hits, Last modified: 10 years ago

====== Convert a Certificate ====== ===== Convert DER to PEM ===== openssl x509 -inform der -in testkey.der... ssl x509 -outform der -in testkey.pem -out testkey.der {{tag>openssl security cryptography certificate howto}}