User Tools

Site Tools


wiki:openssl_commands

This is an old revision of the document!


,

Openssl commands

Get cert expiration date from cert file

 openssl x509 -enddate -noout -in /etc/letsencrypt/live/example.com/cert.pem

Verfiy certs

 openssl verify -CAfile certs/rootCA.crt certs/client.crt
 openssl verify -CAfile certs/rootCA.crt certs/server.crt

Query site for expiration date

 echo | openssl s_client -servername example.com -connect example.com:443 2>/dev/null | openssl x509 -noout -dates -issuer

Determine a Key Size from

Private Key

 openssl rsa -in secret.key -text -noout | grep "Private-Key"

Public Key

 openssl pkey -inform PEM -pubin -in pub.key -text -noout

Display the contents of a PEM formatted certificate

 openssl x509 -in example.com.pem -text

Test explicit TLS with FTPS server

 openssl s_client -starttls ftp -connect localhost:21
wiki/openssl_commands.1607524651.txt.gz · Last modified: 2020/12/09 15:37 by antisa

Except where otherwise noted, content on this wiki is licensed under the following license: CC0 1.0 Universal
CC0 1.0 Universal Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki