Fulltext results:
- Generate a Test Key @info:cryptography:openssl
- ====== Generate a Test Key ====== openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout testkey.ke... t Informations about the used arguments from the OpenSSL man page: * ''[[http://www.openssl.org/docs/apps/req.html|req]]'': PKCS#10 certificate request and certificate generating utility. * ''[[http://www.openssl.org/docs/apps/req.html#item__x509|-x509]]'': this
- Compare a Key with its Certificate @info:cryptography:openssl
- eed to have the same "modulus" and "exponent". openssl x509 -noout -text -in server.crt openssl rsa -noout -text -in server.key The exponent is quite always 65537. So we only need to compare the modulus. openssl x509 -noout -modulus -in server.crt openssl rsa -noout -modulus -in server.key Example: <file> $ opens
- Debug Server Certificate from Client @info:cryptography:openssl
- 09/03/14/checking-a-remote-certificate-chain-with-openssl/| Checking A Remote Certificate Chain With OpenSSL]]" from [[http://langui.sh/|langui.sh]]. openssl s_client -showcerts -connect www.andunix.net:443 Informations about the used arguments from the OpenSSL man page: * ''[[http://www.openssl.org/docs/ap
- Print Information about a Key @info:cryptography:openssl
- ====== Print Information about a Key ====== openssl x509 -inform DER -in testkey.cer -noout -text Informations about the used arguments from the OpenSSL man page: * ''[[http://www.openssl.org/docs/apps/x509.html|x509]]'': Certificate display and signing utility. * ''[[http://www.openssl.org/docs/apps/x509.html#item__inform|-inform DER]
- Print all certificates in a file @info:cryptography:openssl
- and store each certificate in a single file. openssl pkcs7 -in file.pem -print_certs -out certs.pem Informations about the used arguments from the OpenSSL man page: * ''[[http://www.openssl.org/docs/apps/pkcs7.html|pkcs7]]'': PKCS#7 utility * ''[[http://www.openssl.org/docs/apps/pkcs7.html#item__in|-in file.pem]]'
- Print Information about a Certificate @info:cryptography:openssl
- = Print Information about a Certificate ====== openssl x509 -in testkey.crt -noout -text Informations about the used arguments from the OpenSSL man page: * ''[[http://www.openssl.org/docs/apps/x509.html|x509]]'': Certificate display and signing utility. * ''[[http://www.openssl.org/docs/apps/x509.html#item__in|-in testkey.crt]
- Convert a Key @info:cryptography:openssl
- t ''cert.pem'' and ''key.pem'' to ''key.p12'': openssl pkcs12 -export -in cert.pem -inkey key.pem -out k... ertificate with the complete certificate chain: openssl pkcs12 -in testkey.p12 -out testkey.pem -nokeys Export the certificate only: openssl pkcs12 -in testkey.p12 -out testkey.pem -nokeys -clcerts {{tag>openssl security cryptography key howto}}
- Convert a Certificate @info:cryptography:openssl
- ificate ====== ===== Convert DER to PEM ===== openssl x509 -inform der -in testkey.der -out testkey.pem ===== Convert PEM to DER ===== openssl x509 -outform der -in testkey.pem -out testkey.der {{tag>openssl security cryptography certificate howto}}
- Download a Server Certificate @info:cryptography:openssl
- e certificate chain from the server: <code bash> openssl s_client -showcerts -connect www.example.org:443 ... the binary DER format see [[convert_certificate]]. {{tag>openssl security cryptography certificate howto}}
- Print Information about a Signature @info:cryptography:openssl
- Information about a Signature ====== <code bash> openssl pkcs7 -in signature.p7s -text -inform DER -print_certs -noout </code> {{tag> cryptography, howto, openssl, security}}
- OpenSSL @info:cryptography:openssl
- ====== OpenSSL ====== {{indexmenu>.}} {{tag>cryptography howto guide openssl security}}