|
|
Secure Socket Layer (SSL)
# openssl rsa -noout -modulus -in server.key | openssl md5
# openssl x509 -noout -modulus -in server.crt | openssl md5
Comparer les 2 Output s'ils sont les memes ca signifie qu' il ya correspondance entre la clef et le certificat
# openssl x509 -in server.crt -text -noout // details on certificate (Validity, algorithm, Issuer, ...)
# openssl rsa -in private.key -text -noout // details on Key (How many of bits 2048, 4096,...)
# openssl rsa -in privateKey.key -check // Verifier si la clef est correcte
Infos Certificats d' Un site Web
# curl -L -v -s https://rhinotech.sytes.net 1>/dev/null :
# openssl s_client -connect rhinotech.sytes.net:443 | openssl x509 -noout -dates
SSL Certificate file content
In order
- Your site Certificate
- CA Certificate Authority (intermediary)
- CAA Root Certificate
Convert pk12 file (passphrase needed)
# openssl pkcs12 -in www-notes-bg.p12 -nocerts -nodes -out www-notes-bg.key
# openssl pkcs12 -in www-notes-bg.p12 -clcerts -nokeys -out www-notes-bg.crt
# openssl pkcs12 -in www-notes-bg.p12 -cacerts -nokeys -chain -out www-notes-bg-ca-chain.crt
Convert certificate and key to pfx format
# openssl pkcs12 -export -out www-notes-bg.pfx -inkey www-notes-bg.key -in www-notes-bg.crt
Put passphrase
|
