Fulltext results:
- Generate a Test Key
- ====== Generate a Test Key ====== openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout testkey.key -out testkey.crt Informations about the used arguments from the OpenSSL man page: * ''[[http://www.openssl.org/docs/apps/req.html|req]]'': PKCS#10 cert
- Debug Server Certificate from Client
- ====== Debug Server Certificate from Client ====== Credit for this example goes to "[[http://langui.s... /03/14/checking-a-remote-certificate-chain-with-openssl/| Checking A Remote Certificate Chain With OpenSSL]]" from [[http://langui.sh/|langui.sh]]. openssl s_client -showcerts -connect www.andunix.net:4
- Compare a Key with its Certificate
- ', they need to have the same "modulus" and "exponent". openssl x509 -noout -text -in server.crt openssl rsa -noout -text -in server.key The exponent is quite always 65537. So we only need to compare th
- Print Information about a Key
- ====== Print Information about a Key ====== openssl x509 -inform DER -in testkey.cer -noout -text Informations about the used arguments from the OpenSSL man page: * ''[[http://www.openssl.org/docs/apps/x509.html|x509]]'': Certificate display and si
- Print Information about a Certificate
- Print Information about a Certificate ====== openssl x509 -in testkey.crt -noout -text Informations about the used arguments from the OpenSSL man page: * ''[[http://www.openssl.org/docs/apps/x509.html|x509]]'': Certificate display and si
- Print all certificates in a file
- -print_certs to print all the certificates and then cut the file and store each certificate in a single file. openssl pkcs7 -in file.pem -print_certs -out certs.pem Informations about the used arguments from the OpenSSL man page: * ''[[http://www.openssl.org/docs/apps/pkcs7.html|pkcs7]]'': PKCS#7 u
- Download a Server Certificate
- certificate chain from the server: <code bash> openssl s_client -showcerts -connect www.example.org:443 </dev/null </code> This will output the whole se... ficate chain. Every chertificate ist wrapped between ''-----BEGIN CERTIFICATE-----'' and ''-----END CERTIFICATE-----''. The first certificate is the serve
- Convert a Key
- ''cert.pem'' and ''key.pem'' to ''key.p12'': openssl pkcs12 -export -in cert.pem -inkey key.pem -ou... tificate with the complete certificate chain: openssl pkcs12 -in testkey.p12 -out testkey.pem -nokeys Export the certificate only: openssl pkcs12 -in testkey.p12 -out testkey.pem -nokeys -clcerts {{tag>openssl security cryptography key howto}}
- Convert a Certificate
- icate ====== ===== Convert DER to PEM ===== openssl x509 -inform der -in testkey.der -out testkey.pem ===== Convert PEM to DER ===== openssl x509 -outform der -in testkey.pem -out testkey.der {{tag>openssl security cryptography certificate howto}}
- OpenSSL
- ====== OpenSSL ====== {{indexmenu>.}} {{tag>cryptography howto guide openssl security}}
- Print Information about a Signature
- formation about a Signature ====== <code bash> openssl pkcs7 -in signature.p7s -text -inform DER -print_certs -noout </code> {{tag> cryptography, howto, openssl, security}}
- andunix Infos
- ===== andunix Infos ===== {{indexmenu>info:#1 .:#1}} ===== Tags ===== ~~TAGCLOUD:50~~