tipy pro praci s certifikaty



To show certificate request in plain text:
openssl req -in certificate-request.pem -noout -text

To show certificate in plain text:
openssl x509 -in certificate.pem -noout -text 

Using OpenSSL to get a Server Certificate
openssl s_client -showcerts -connect server:port

Installing CA Certificates into the OpenSSL framework
debian: /etc/ssl/cert

1) copy CA certificate (.pem) to /etc/ssl/cert

2) calculate hash
openssl x509 -noout -hash -in ca-certificate.pem
3) symlink with hash value as name to ca-certificate.pem
ln -s ca-certificate.pem hashvalue.0

Testing server certificate against installed CA certificate
openssl verify -CApath /etc/ssl/certs server-certificate.pem
Last update:
2009-04-07 22:51
Author:
Daniel
Revision:
1.2
Average rating:0 (0 Votes)

You can comment this FAQ

Chuck Norris has counted to infinity. Twice.