Openssl - Revision history

George2 at 11:25, 25 November 2025

2025-11-25T11:25:28Z

2025-11-25T11:24:02Z

2021-11-16T11:25:34Z

2021-11-11T15:01:34Z

2021-11-11T14:55:58Z

2021-06-28T10:55:31Z

2021-04-13T08:52:22Z

2019-03-28T15:31:38Z

2019-03-28T15:30:41Z

2018-07-03T16:08:28Z

@@ Line 143: / Line 143: @@
 </source>
-Create a .pfx file from certificate and private key:
+'''Create a .pfx file from certificate and private key:'''
 <source lang="text">
 openssl pkcs12 -export -out domain.name.pfx -inkey domain.name.key -in domain.name.crt
 </source>

@@ Line 141: / Line 141: @@
      Run the following command to export the certificate: openssl pkcs12 -in certname.pfx -nokeys -out cert.pem
      Run the following command to remove the passphrase from the private key: openssl rsa -in key.pem -out server.key
 </source>

@@ Line 65: / Line 65: @@
 ::::openssl x509 -noout -in certificate.pem -fingerprint -sha256<br>
-'''You can check if an SSL certificate matches a Private Key by using the 3 easy commands below.<br>'''
+'''You can check if an SSL certificate matches a Private Key by using the 2 easy commands below.<br>'''
-For your SSL certificate: openssl x509 -noout -modulus -in <file>.crt | openssl md5<br>
+::::'''For your SSL certificate:''' openssl x509 -noout -modulus -in <file>.crt | openssl md5<br>
-For your RSA private key: openssl rsa -noout -modulus -in <file>.key | openssl md5<br>
+::::'''For your RSA private key:''' openssl rsa -noout -modulus -in <file>.key | openssl md5<br>
 '''Debugging Using OpenSSL'''<br>

@@ Line 66: / Line 66: @@
 '''You can check if an SSL certificate matches a Private Key by using the 3 easy commands below.<br>'''
-For your SSL certificate: openssl x509 –noout –modulus –in <file>.crt | openssl md5<br>
+For your SSL certificate: openssl x509 -noout -modulus -in <file>.crt | openssl md5<br>
-For your RSA private key: openssl rsa –noout –modulus –in <file>.key | openssl md5<br>
+For your RSA private key: openssl rsa -noout -modulus -in <file>.key | openssl md5<br>
 '''Debugging Using OpenSSL'''<br>

@@ Line 64: / Line 64: @@
 ::'''Get SHA-256 fingerprint:'''<br>
 ::::openssl x509 -noout -in certificate.pem -fingerprint -sha256<br>
 '''Debugging Using OpenSSL'''<br>

@@ Line 4: / Line 4: @@
 update-ca-trust extract  <br>
 openssl verify  rapidSSL-ca.crt <br>
 == General OpenSSL Commands ==

@@ Line 128: / Line 128: @@
 <source lang="text">
 Procedure
      Take the file you exported (e.g. certname.pfx) and copy it to a system where you have OpenSSL installed. Note: the *.pfx file is in PKCS#12 format and includes both the certificate and the private key.

@@ Line 125: / Line 125: @@
 enter aes-256-cbc decryption password:<br>
-Extracting keys from a .pfx file <br>
+'''Extracting Certificate and Private Key Files from a .pfx File''' <br>
 <source lang="text">
 Procedure

← Older revision		Revision as of 15:30, 28 March 2019
Line 124:		Line 124:
	$ openssl enc -aes-256-cbc -d -in services.dat > services.txt<br>		$ openssl enc -aes-256-cbc -d -in services.dat > services.txt<br>
	enter aes-256-cbc decryption password:<br>		enter aes-256-cbc decryption password:<br>
		+
		+	Extracting keys from a .pfx file <br>
		+	<source lang="text">
		+	Procedure
		+
		+	Take the file you exported (e.g. certname.pfx) and copy it to a system where you have OpenSSL installed. Note: the *.pfx file is in PKCS#12 format and includes both the certificate and the private key.
		+	Run the following command to export the private key: openssl pkcs12 -in certname.pfx -nocerts -out key.pem -nodes
		+	Run the following command to export the certificate: openssl pkcs12 -in certname.pfx -nokeys -out cert.pem
		+	Run the following command to remove the passphrase from the private key: openssl rsa -in key.pem -out server.key
		+	</source>

@@ Line 29: / Line 29: @@
 '''Calculating sha-1 fingerprint '''<br>
-openssl x509 -noout -in idp_blabla_ac_uk.crt -fingerprint -sha1<br>
+:openssl x509 -noout -in idp_blabla_ac_uk.crt -fingerprint -sha1<br>
 '''Calculating SHA-256 fingerprint'''<br>
-openssl x509 -noout -fingerprint -sha256 -in filename.crt<br>
+:openssl x509 -noout -fingerprint -sha256 -in filename.crt<br>