OPENSSL - Certificate Verifications

From Wiki.IT-Arts.net
Revision as of 11:25, 1 May 2024 by imported>Z (Created page with "Category:Post-It == Renewing x509 Certificate == <nowiki> openssl x509 -in certfile -out new_certfile</nowiki> == Renewing RSA chain == <nowiki> openssl rsa -in...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)



Renewing x509 Certificate

openssl x509 -in certfile -out new_certfile


Renewing RSA chain

openssl rsa -in keyfile -out new_keyfile


Verification Of A Certificate, The Key And The CSR

openssl x509 -noout -modulus -in CERTIFICATE.crt | openssl md5
openssl rsa -noout -modulus -in KEY.key | openssl md5
openssl req -noout -modulus -in REQUEST.csr | openssl md5

Compare the hashes.


Changing An Empty Passphrase

openssl rsa -in secure-mycert.key -out unsecure-mycert.key


Certificate Chain Verification (CA Intermediate + Certificat)

openssl verify -CAfile CA.crt CERTIFICAT.crt