Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revision | |
| openssl [2022/04/05 14:01] – PKCS12 / pfx wolfo | openssl [2026/05/29 15:47] (current) – cert checking wolfo |
|---|
| ====== OpenSSL ====== | ====== OpenSSL ====== |
| ^ Command ^ Effect ^ | ^ Command ^ Effect ^ |
| ^ Certificate creation ^ | ^ Certificate checking ^^ |
| | | ''openssl x509 -in /some/dir/ca.crt -text -noout'' | Check a certificate | |
| | ^ Certificate creation ^^ |
| | ''openssl req -newkey rsa:2048 -nodes -keyout mycert.key -x509 -days 365 -out mycert.pem'' | Create self-signed certificate | | | ''openssl req -newkey rsa:2048 -nodes -keyout mycert.key -x509 -days 365 -out mycert.pem'' | Create self-signed certificate | |
| | ''openssl req -new -newkey rsa:2048 -nodes -keyout mycert.key -out mycert.csr'' | Create certificate signing request (CSR) | | | ''openssl req -new -newkey rsa:2048 -nodes -keyout mycert.key -out mycert.csr'' | Create certificate signing request (CSR) | |
| | ''openssl x509 -req -days 1825 -in mycert.csr -CA ca.crt -CAkey ca.key -set_serial 01 -out mycert.crt'' | Use CSR to create a certificate against the CA | | | ''openssl x509 -req -days 1825 -in mycert.csr -CA ca.crt -CAkey ca.key -set_serial 01 -out mycert.crt'' | Use CSR to create a certificate against the CA | |
| | ''openssl dhparam -out dhparam-2048.pem 2048 '' | Generate Diffie-Hellman (DH) parameters | | | ''openssl dhparam -out dhparam-2048.pem 2048 '' | Generate Diffie-Hellman (DH) parameters | |
| ^ Conversion & Combination ^ | ^ Conversion & Combination ^^ |
| | ''openssl pkcs12 -export -out mycert.pfx -inkey mycert.key -in mycert.crt -certfile ca.crt'' | combine key, CA and client certificate to PKCS12 bundle | | | ''openssl pkcs12 -export -out mycert.pfx -inkey mycert.key -in mycert.crt -certfile ca.crt'' | combine key, CA and client certificate to PKCS12 bundle | |
| ^ Random Number Generation ^ | ^ Random Number Generation ^^ |
| | ''openssl rand -hex 32'' | Generate random 32-Byte hex value | | | ''openssl rand -hex 32'' | Generate random 32-Byte hex value | |
