OPENSSL - Certificate Verifications

From Wiki.IT-Arts.net



Renewing x509 Certificate

openssl x509 -in certfile -out new_certfile


Renewing RSA chain

openssl rsa -in keyfile -out new_keyfile


Verification Of A Certificate, The Key And The CSR

openssl x509 -noout -modulus -in CERTIFICATE.crt | openssl md5
openssl rsa -noout -modulus -in KEY.key | openssl md5
openssl req -noout -modulus -in REQUEST.csr | openssl md5

Compare the hashes.


Changing An Empty Passphrase

openssl rsa -in secure-mycert.key -out unsecure-mycert.key


Certificate Chain Verification (CA Intermediate + Certificat)

openssl verify -CAfile CA.crt CERTIFICAT.crt