Miroirs/the-book-of-secret-knowledge
1
0
Fork 0
mirror of https://github.com/trimstray/the-book-of-secret-knowledge synced 2025-02-06 08:45:56 +01:00
Code Issues Projects Releases Packages Wiki Activity

added new 'openssl' one-liners

Browse source 
- signed-off-by: trimstray <trimstray@gmail.com>
This commit is contained in:
trimstray 2019-04-18 10:26:11 +02:00
parent 6ccc7bb16b
commit 7de5c33234
1 changed files with 21 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

24
README.md
View file

@ -1824,7 +1824,7 @@ openssl s_client -tls1_2 -connect google.com:443
openssl s_client -cipher 'AES128-SHA' -connect google.com:443 openssl s_client -cipher 'AES128-SHA' -connect google.com:443
``` ```
###### Generate private key ###### Generate private key without passphrase
```bash ```bash
# _len: 2048, 4096 # _len: 2048, 4096
@ -1870,7 +1870,7 @@ openssl rsa -check -in ${_fd} )
openssl rsa -pubout -in ${_fd} -out ${_fd_pub} ) openssl rsa -pubout -in ${_fd} -out ${_fd_pub} )
``` ```
###### Generate private key + csr ###### Generate private key and csr
```bash ```bash
( _fd="private.key" ; _fd_csr="request.csr" ; _len="4096" ; \ ( _fd="private.key" ; _fd_csr="request.csr" ; _len="4096" ; \
@ -1967,10 +1967,28 @@ openssl req -new -key ${_fd} -out ${_fd_csr} -sha256 )
```bash ```bash
# _len: 2048, 4096 # _len: 2048, 4096
( _fd="domain.key" ; _fd_out="domain.crt" ; _len="4096" ; _days="365" ; \ ( _fd="domain.key" ; _fd_out="domain.crt" ; _len="4096" ; _days="365" ; \
openssl req -newkey rsa:${_len} -nodes -keyout ${_fd} \ openssl req -newkey rsa:${_len} -nodes \
-keyout ${_fd} -x509 -days ${_days} -out ${_fd_out} )
```
###### Generate self-signed certificate from existing private key
```bash
# _len: 2048, 4096
( _fd="domain.key" ; _fd_out="domain.crt" ; _days="365" ; \
openssl req -key ${_fd} -nodes \
-x509 -days ${_days} -out ${_fd_out} ) -x509 -days ${_days} -out ${_fd_out} )
``` ```
###### Generate self-signed certificate from existing private key and csr
```bash
# _len: 2048, 4096
( _fd="domain.key" ; _fd_csr="domain.csr" ; _fd_out="domain.crt" ; _days="365" ; \
openssl x509 -signkey ${_fd} -nodes \
-in ${_fd_csr} -req -days ${_days} -out ${_fd_out} )
```
###### Convert DER to PEM ###### Convert DER to PEM
```bash ```bash