Difference between revisions of "Openssl (command)"
Jump to navigation
Jump to search
| (4 intermediate revisions by the same user not shown) | |||
| Line 3: | Line 3: | ||
[[OpenSSL]] is a cryptography toolkit implementing the Secure Sockets Layer ([[SSL]] v2/v3) and Transport Layer Security ([[TLS]] v1) network protocols and related cryptography, | [[OpenSSL]] is a cryptography toolkit implementing the Secure Sockets Layer ([[SSL]] v2/v3) and Transport Layer Security ([[TLS]] v1) network protocols and related cryptography, | ||
* https://www.openssl.org/docs/manmaster/man1/openssl.html | * https://www.openssl.org/docs/manmaster/man1/openssl.html | ||
| + | * https://github.com/openssl/openssl/releases | ||
* <code>[[brew install openssl]]</code> | * <code>[[brew install openssl]]</code> | ||
* <code>[[brew install [email protected]]]</code> | * <code>[[brew install [email protected]]]</code> | ||
| Line 8: | Line 9: | ||
== Commands == | == Commands == | ||
* <code> [[openssl rand]] </code> | * <code> [[openssl rand]] </code> | ||
| − | * <code> [[openssl s_client]] </code> | + | * <code> [[openssl s_client]]: [[openssl s_client -showcerts -connect]] </code> |
* <code> [[openssl enc]] </code> | * <code> [[openssl enc]] </code> | ||
| Line 20: | Line 21: | ||
== openssl update == | == openssl update == | ||
* <code>openssl version</code> | * <code>openssl version</code> | ||
| − | * <code>[[ | + | * <code>[[apt install --only-upgrade openssl]]</code> |
| − | == Related | + | == Related == |
* <code>[[keytool]]</code> java utility | * <code>[[keytool]]</code> java utility | ||
* https://www.cve.org/CVERecord?id=CVE-2023-3446, [[RHEL]]: https://access.redhat.com/security/cve/CVE-2023-3446 | * https://www.cve.org/CVERecord?id=CVE-2023-3446, [[RHEL]]: https://access.redhat.com/security/cve/CVE-2023-3446 | ||
* https://www.cve.org/CVERecord?id=CVE-2023-3817 | * https://www.cve.org/CVERecord?id=CVE-2023-3817 | ||
| + | * <code>[[sslcan]]</code> | ||
== Activities == | == Activities == | ||
* [[How to check certification expiration date from command line]]: <code>[[openssl x509]]</code> | * [[How to check certification expiration date from command line]]: <code>[[openssl x509]]</code> | ||
| + | * [[Update deprecated openssl library from source code]] | ||
== See also == | == See also == | ||
Latest revision as of 12:03, 27 February 2024
OpenSSL is a cryptography toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) network protocols and related cryptography,
- https://www.openssl.org/docs/manmaster/man1/openssl.html
- https://github.com/openssl/openssl/releases
brew install opensslbrew install [email protected]
Commands[edit]
Generate a CSR:
openssl update[edit]
openssl versionapt install --only-upgrade openssl
Related[edit]
keytooljava utility- https://www.cve.org/CVERecord?id=CVE-2023-3446, RHEL: https://access.redhat.com/security/cve/CVE-2023-3446
- https://www.cve.org/CVERecord?id=CVE-2023-3817
sslcan
Activities[edit]
- How to check certification expiration date from command line:
openssl x509 - Update deprecated openssl library from source code
See also[edit]
- X.509, ASN.1,
openssl x509,.pem, der, PFX, PKCS, SAN,openssl x509, CSR openssl[rand | s_client | passwd|openssl req|openssl rsa|openssl genrsa|openssl x509|openssl ca|openssl verify|openssl ec|openssl dgst|openssl pkcs12|openssl asn1parse|openssl help|.cer to .pem, openssl version- OpenSSL: RSA, ECDSA, WolfSSL, AES, Diffie-Hellman (DH) key-exchange,
/etc/ssl/openssl.cnf, OpenSSL v3
Advertising:
