User Tools

Site Tools


snippets:openssl

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
snippets:openssl [2017/12/04 17:01] allsparksnippets:openssl [2025/03/06 10:20] (current) allspark
Line 1: Line 1:
 +# create selfsign
  
 +```
 +openssl genrsa -out server.key 4096
 +openssl req -new -key server.key -out server.csr
 +openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt
 +```
 +
 +# exporting
 +
 +```
 +Run the following command to export the private key: openssl pkcs12 -in certname.pfx -nocerts -out key.pem -nodes
 +Run the following command to export the certificate: openssl pkcs12 -in certname.pfx -nokeys -out cert.pem
 +Run the following command to remove the passphrase from the private key: openssl rsa -in key.pem -out server.key 
 +```
 +
 +# to pkcs12
 +
 +```
 +openssl pkcs12 -export -out c.pfx -inkey privkey.pem -in cert.pem -certfile chain.pem -passout pass:<pass>
 +```
 +
 +# dhparams
 +
 +```
 +openssl dhparam -out /etc/nginx/ssl/dhparam.pem 2048
 +```
 +
 +# connect to TLS port
 +
 +```
 +openssl s_client --connect <host>:<port>
 +```