Fulltext results:
- Generate a Test Key
- ====== Generate a Test Key ====== openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout testkey... t Informations about the used arguments from the OpenSSL man page: * ''[[http://www.openssl.org/docs/apps/req.html|req]]'': PKCS#10 certificate request an... ertificate generating utility. * ''[[http://www.openssl.org/docs/apps/req.html#item__x509|-x509]]'': t
- Compare a Key with its Certificate
- eed to have the same "modulus" and "exponent". openssl x509 -noout -text -in server.crt openssl rsa -noout -text -in server.key The exponent is quite al... 65537. So we only need to compare the modulus. openssl x509 -noout -modulus -in server.crt openssl rsa -noout -modulus -in server.key Example: <file> $
- Debug Server Certificate from Client
- 09/03/14/checking-a-remote-certificate-chain-with-openssl/| Checking A Remote Certificate Chain With OpenSSL]]" from [[http://langui.sh/|langui.sh]]. openssl s_client -showcerts -connect www.andunix.net:443 Informations about the used arguments from the OpenSSL man page: * ''[[http://www.openssl.org/docs
- Print Information about a Key
- ====== Print Information about a Key ====== openssl x509 -inform DER -in testkey.cer -noout -text Informations about the used arguments from the OpenSSL man page: * ''[[http://www.openssl.org/docs/apps/x509.html|x509]]'': Certificate display and signing utility. * ''[[http://www.openssl.org/docs/apps/x509.html#item__inform|-inform D
- Print all certificates in a file
- and store each certificate in a single file. openssl pkcs7 -in file.pem -print_certs -out certs.pem Informations about the used arguments from the OpenSSL man page: * ''[[http://www.openssl.org/docs/apps/pkcs7.html|pkcs7]]'': PKCS#7 utility * ''[[http://www.openssl.org/docs/apps/pkcs7.html#item__in|-in file.pem
- Print Information about a Certificate
- = Print Information about a Certificate ====== openssl x509 -in testkey.crt -noout -text Informations about the used arguments from the OpenSSL man page: * ''[[http://www.openssl.org/docs/apps/x509.html|x509]]'': Certificate display and signing utility. * ''[[http://www.openssl.org/docs/apps/x509.html#item__in|-in testkey.c
- Convert a Key
- t ''cert.pem'' and ''key.pem'' to ''key.p12'': openssl pkcs12 -export -in cert.pem -inkey key.pem -ou... ertificate with the complete certificate chain: openssl pkcs12 -in testkey.p12 -out testkey.pem -nokeys Export the certificate only: openssl pkcs12 -in testkey.p12 -out testkey.pem -nokeys -clcerts {{tag>openssl security cryptography key howto}}
- Convert a Certificate
- ificate ====== ===== Convert DER to PEM ===== openssl x509 -inform der -in testkey.der -out testkey.pem ===== Convert PEM to DER ===== openssl x509 -outform der -in testkey.pem -out testkey.der {{tag>openssl security cryptography certificate howto}}
- Download a Server Certificate
- e certificate chain from the server: <code bash> openssl s_client -showcerts -connect www.example.org:4... binary DER format see [[convert_certificate]]. {{tag>openssl security cryptography certificate howto}}
- Print Information about a Signature
- Information about a Signature ====== <code bash> openssl pkcs7 -in signature.p7s -text -inform DER -print_certs -noout </code> {{tag> cryptography, howto, openssl, security}}
- OpenSSL
- ====== OpenSSL ====== {{indexmenu>.}} {{tag>cryptography howto guide openssl security}}