openssl (command)

OpenSSL is a cryptography toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) network protocols and related cryptography,

• https://www.openssl.org/docs/manmaster/man1/openssl.html
• https://github.com/openssl/openssl/releases
• brew install openssl
• brew install [email protected]

Commands

• openssl rand
• openssl s_client: openssl s_client -showcerts -connect
• openssl enc

Generate a CSR:

• openssl req
• openssl x509
• openssl genrsa
• openssl rsa
• openssl ca

openssl update

• openssl version
• apt install --only-upgrade openssl

Related

• keytool java utility
• https://www.cve.org/CVERecord?id=CVE-2023-3446, RHEL: https://access.redhat.com/security/cve/CVE-2023-3446
• https://www.cve.org/CVERecord?id=CVE-2023-3817
• sslcan

Activities

• How to check certification expiration date from command line: openssl x509
• Update deprecated openssl library from source code

See also

• X.509, ASN.1, openssl x509, .pem, der, PFX, PKCS, SAN, openssl x509, CSR
• openssl [ rand | s_client | passwd | openssl req | openssl rsa | openssl genrsa | openssl x509 | openssl ca | openssl verify | openssl ec | openssl dgst | openssl pkcs12 | openssl asn1parse | openssl help | .cer to .pem, openssl version
• OpenSSL: RSA, ECDSA, WolfSSL, AES, Diffie-Hellman (DH) key-exchange, /etc/ssl/openssl.cnf, OpenSSL v3