Difference between revisions of "OpenSSL"
Jump to navigation
Jump to search
| Line 33: | Line 33: | ||
* Generate a [[random]] number: <code>openssl rand -base64 32</code><ref>https://www.howtogeek.com/howto/30184/10-ways-to-generate-a-random-password-from-the-command-line/</ref> | * Generate a [[random]] number: <code>openssl rand -base64 32</code><ref>https://www.howtogeek.com/howto/30184/10-ways-to-generate-a-random-password-from-the-command-line/</ref> | ||
* <code>openssl s_client -showcerts -connect gnupg.org:443</code> | * <code>openssl s_client -showcerts -connect gnupg.org:443</code> | ||
| − | * Encrypt a file using aes-256-cbc cypher using <code>[[openssl enc]]</code> command | + | * [[Encrypt]] a file using aes-256-cbc cypher using <code>[[openssl enc]]</code> command |
== See also == | == See also == | ||
Revision as of 15:03, 4 January 2020
OpenSSL is an open source implementation of the TSL cryptographic protocol, and its now-deprecated predecessor, Secure Sockets Layer (SSL) protocol. You can perform some basic operations, such as:
Examples
Generate a new self signed Certificate instead of a CSR
openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -keyout private.key -out public.pem
Output a self-signed certificate instead of a certificate request
-nodes(short for no DES) do not encrypt private key-x509Output a self-signed certificate instead of a certificate request
Read CSR
openssl req -text -noout -in root.csr
Read certificate (CRT)
openssl x509 -text -noout -in root.crt
Encrypt and decrypt a file[1] (GPG can also be used for encrypting and decrypting files)
Using aes-256-cbc cypher, You will be prompted for a password when encrypting that has to be used for decrypting.[2]
- Encrypt file (
openssl enc):
openssl enc -aes-256-cbc -in un_encrypted.data -out encrypted.data- Use
filecommand to verify file type.
file encrypted.data encrypted.data: openssl enc'd data with salted password
- Decrypt file (
openssl enc -d):
openssl enc -d -aes-256-cbc -in encrypted.data -out un_encrypted.data
Activities
- Generate a random number:
openssl rand -base64 32[3] openssl s_client -showcerts -connect gnupg.org:443- Encrypt a file using aes-256-cbc cypher using
openssl enccommand
See also
- Installing a web server/Nginx web server
- OpenSSH (changelog):
/etc/ssh/sshd_config|/etc/ssh/ssh_config|~/.ssh/|openSSL | sshd logs|sftp|scp|authorized_keys|ssh-keygen|ssh-keyscan|ssh-add|ssh-agent|ssh|Ssh -O stop|ssh-copy-id|CheckHostIP|UseKeychain, OpenSSF ansible-vault- HTTP, HTTP client, HTTP/1.1, HTTP/2, HTTP/3, HTTPS, HSTS CSR, TLS, SSL,
openSSL, WebSockets, WebRTC,ssl_certificateQUIC, HPKP, CT, List of HTTP status codes, URL redirection, Content-type:, Webhook, HTTP headers,--insecure, Axios HTTP client, HTTP cookies, HTTP ETag, Hypertext Transfer Protocol -- HTTP/1.1 - encfs
- GPG
pbcopymacOS command
Text is available under the Creative Commons Attribution-ShareAlike License; additional terms may apply. By using this site, you agree to the Terms of Use and Privacy Policy.
Advertising:
