Differences

This shows you the differences between two versions of the page.

--- openssl [2017/11/04 09:23] – baumi
+++ openssl [2023/11/17 10:23] (current) – [Zertifikat von PCKS12 im CRT und KEY konvertieren] baumi
@@ Line 2: / Line 2: @@
 ===== Zertifikat anzeigen =====
-<code bash>openssl x509 -text -in $certfile</code>
+<code bash>openssl x509 -text -noout -in $certfile</code>
+===== CSR anzeigen=====
+<code bash>openssl req -text -noout -in $csrfile</code>
 ===== Self Signed Zertifikat erzeugen (one liner) =====
-<code bash>openssl req -x509 -nodes -days 365 -subj '/C=AT/ST=/L=/O=/OU=/CN=' -newkey rsa:2048 -keyout $keyfile -out $certfile</code>
+<code bash>openssl req -x509 -nodes -days 365 -subj '/C=AT/ST=/L=/O=/OU=/CN=' -sha256 -newkey rsa:2048 -keyout $keyfile -out $certfile</code>
 ===== Zertifikat von PEM auf PCKS12 konvertieren =====
 <code bash>openssl pkcs12 -export -in $certfile -inkey $keyfile -out $p12file</code>
+==== Mit CA Chain ====
+<code bash>openssl pkcs12 -export -in $certfile -inkey $keyfile -certfile $cacertchain -out $p12file</code>
+===== Zertifikat von PCKS12 im CRT und KEY konvertieren =====
+<code bash>openssl pkcs12 -in $p12file -out $certfile -clcerts -nokeys
+openssl pkcs12 -in $p12file -out $keyfile -nocerts</code>
+===== Passphrase von Key entfernen =====
+<code bash>
+openssl rsa -in $keyfile -out $keyfile2
+</code>
 {{tag>kb ssl}}