web:security:openssl

Diferències

Ací es mostren les diferències entre la revisió seleccionada i la versió actual de la pàgina.

Enllaç a la visualització de la comparació

web:security:openssl [04/12/2021 07:13] – creat mateweb:security:openssl [17/09/2026 10:32] (actual) – mate
Línia 4: Línia 4:
  
 == utils == utils
-  * Remove a passphrase from a private key:<code bash>openssl rsa -in privateKey.pem -out newPrivateKey.pem +  * Remove a passphrase from a private key:<code bash>openssl rsa -in privateKey.pem -out newPrivateKey.pem</code>
-</code>+
 == check == check
-  * Check a Certificate Signing Request (CSR):<code bash>openssl req -text -noout -verify -in CSR.csr +  * Check a Certificate Signing Request (CSR):<code bash>openssl req -text -noout -verify -in CSR.csr</code> 
-</code> +  * Check a private key: <code bash>openssl rsa -in privateKey.key -check</code> 
-  * Check a private key: <code bash>openssl rsa -in privateKey.key -check +  * Check a certificate: <code bash>openssl x509 -in certificate.crt -text -noout</code> 
-</code> +  * Check a PKCS#12 file (.pfx or .p12):<code bash>openssl pkcs12 -info -in keyStore.p12</code>
-  * Check a certificate: <code bash>openssl x509 -in certificate.crt -text -noout +
-</code> +
-  * Check a PKCS#12 file (.pfx or .p12):<code bash>openssl pkcs12 -info -in keyStore.p12 +
-</code>+
  
 == debug == debug
Línia 23: Línia 18:
  
 == converting == converting
-  * Convert a DER file (.crt .cer .der) to PEM:<code bash>openssl x509 -inform der -in certificate.cer -out certificate.pem +  * Convert a DER file (.crt .cer .der) to PEM:<code bash>openssl x509 -inform der -in certificate.cer -out certificate.pem</code> 
-</code> +  * Convert a PEM file to DER:<code bash>openssl x509 -outform der -in certificate.pem -out certificate.der</code> 
-  * Convert a PEM file to DER:<code bash>openssl x509 -outform der -in certificate.pem -out certificate.der +  * Convert a PKCS#12 file (.pfx .p12) containing a private key and certificates to PEM:<code bash>openssl pkcs12 -in keyStore.pfx -out keyStore.pem -nodes</code> 
-</code> +  * Convert a PEM certificate file and a private key to PKCS#12 (.pfx .p12):<code bash>openssl pkcs12 -export -out certificate.pfx -inkey privateKey.key -in certificate.crt -certfile CACert.crt</code> 
-  * Convert a PKCS#12 file (.pfx .p12) containing a private key and certificates to PEM:<code bash>openssl pkcs12 -in keyStore.pfx -out keyStore.pem -nodes + 
-</code> +== pfx 
-  * Convert a PEM certificate file and a private key to PKCS#12 (.pfx .p12):<code bash>openssl pkcs12 -export -out certificate.pfx -inkey privateKey.key -in certificate.crt -certfile CACert.crt +verificar dades del certificat: 
-</code>+<code bash>openssl pkcs12 -in certificado.pfx -nokeys | openssl x509 -noout -enddate</code> 
 +<code bash>openssl pkcs12 -in certificado.pfx -nokeys | openssl x509 -noout -dates</code> 
 +<code bash>openssl pkcs12 -in certificado.pfx -nokeys | openssl x509 -noout -text</code> 
 + 
 +== generar PFX desde PEM 
 +<code bash>#! /usr/bin/env bash 
 + 
 +sudo openssl pkcs12 -export \ 
 +    -out /home/fidmag/certbot/fidmag.org.pfx \ 
 +    -inkey /etc/letsencrypt/live/fidmag.org/privkey.pem \ 
 +    -in /etc/letsencrypt/live/fidmag.org/fullchain.pem \ 
 +    --passout pass:password 
 +sudo chown fidmag /home/fidmag/certbot/fidmag.org.pfx</code>
  • web/security/openssl.txt
  • Darrera modificació: 17/09/2026 10:32
  • per mate