Fulltext results:
- Generate a Test Key
- l req -x509 -nodes -days 365 -newkey rsa:2048 -keyout testkey.key -out testkey.crt Informations about the used arguments from the OpenSSL man page: * ''[[http://www.open... s/apps/req.html#item__x509|-x509]]'': this option outputs a self signed certificate instead of a certif
- Compare a Key with its Certificate
- same "modulus" and "exponent". openssl x509 -noout -text -in server.crt openssl rsa -noout -text -in server.key The exponent is quite always 65537. So... y need to compare the modulus. openssl x509 -noout -modulus -in server.crt openssl rsa -noout -modulus -in server.key Example: <file> $ openssl x509
- Print Information about a Key
- ====== Print Information about a Key ====== openssl x509 -inform DER -in testkey.cer -noout -text Informations about the used arguments from the OpenSSL man page: * ''[[http://www.openssl.or... ttp://www.openssl.org/docs/apps/x509.html#item__noout|-noout]]'': this option prevents output of the en
- Print Information about a Certificate
- ====== Print Information about a Certificate ====== openssl x509 -in testkey.crt -noout -text Informations about the used arguments from the OpenSSL man page: * ''[[http://www.openssl.or... ttp://www.openssl.org/docs/apps/x509.html#item__noout|-noout]]'': this option prevents output of the en
- Print all certificates in a file
- ile. openssl pkcs7 -in file.pem -print_certs -out certs.pem Informations about the used arguments from the OpenSSL man page: * ''[[http://www.openss... 7.html#item__print_certs|-print_certs]]'': prints out any certificates or CRLs contained in the file. T... http://www.openssl.org/docs/apps/pkcs7.html#item__out|-out certs.pem]]'': specifies the output filename
- Convert a Certificate
- ==== openssl x509 -inform der -in testkey.der -out testkey.pem ===== Convert PEM to DER ===== openssl x509 -outform der -in testkey.pem -out testkey.der {{tag>openssl security cryptography certificate howto}}
- Convert a Key
- enssl pkcs12 -export -in cert.pem -inkey key.pem -out key.p12 ===== Export Certificate from P12 ===== ... tificate chain: openssl pkcs12 -in testkey.p12 -out testkey.pem -nokeys Export the certificate only: openssl pkcs12 -in testkey.p12 -out testkey.pem -nokeys -clcerts {{tag>openssl secur
- Download a Server Certificate
- www.example.org:443 </dev/null </code> This will output the whole server certificate chain. Every cher... server certificate. So you only need to copy the output from the first ''-----BEGIN CERTIFICATE-----''
- Debug Server Certificate from Client
- erts -connect www.andunix.net:443 Informations about the used arguments from the OpenSSL man page: ... ect to the local host on port 443. ===== Example Output ===== <file> $ openssl s_client -showcerts -c... ...v......... Start Time: 1398672406 Timeout : 300 (sec) Verify return code: 20 (unable
- Print Information about a Signature
- ====== Print Information about a Signature ====== <code bash> openssl pkcs7 -in signature.p7s -text -inform DER -print_certs -noout </code> {{tag> cryptography, howto, openssl, sec