openssl

差異處

這裏顯示兩個版本的差異處。

連向這個比對檢視

兩邊的前次修訂版 前次修改
下次修改
前次修改
openssl [2018/12/29 21:06] jzopenssl [2018/12/29 21:34] (目前版本) jz
行 1: 行 1:
 ====== OpenSSL ====== ====== OpenSSL ======
  
-===== Gen key =====+===== Generate a Key =====
 <code> <code>
 openssl genrsa -out cakey.pem 4096 openssl genrsa -out cakey.pem 4096
 </code> </code>
  
-===== Gen CA =====+===== Generate CA =====
 <code> <code>
 openssl req -x509 -new -nodes -key cakey.pem -days 3650 -out cacert.pem openssl req -x509 -new -nodes -key cakey.pem -days 3650 -out cacert.pem
 </code> </code>
  
-===== Gen cert key =====+===== Generate Cert key =====
 <code> <code>
 openssl genrsa -out key.pem 4096 openssl genrsa -out key.pem 4096
 </code> </code>
  
-===== Gen csr =====+===== Generate CSR =====
 <code> <code>
 openssl req -new -key key.pem -out csr.pem -sha256 openssl req -new -key key.pem -out csr.pem -sha256
行 37: 行 37:
 </code> </code>
  
-===== Single cert =====+===== Single Cert =====
 <code> <code>
 openssl genrsa -out bluenet-ride.com.key 4096 openssl genrsa -out bluenet-ride.com.key 4096
行 54: 行 54:
 openssl x509 -noout -text -in cert.pem openssl x509 -noout -text -in cert.pem
 openssl req -noout -text -in req.pem openssl req -noout -text -in req.pem
 +</code>
 +
 +
 +===== Trust CA system-wide =====
 +<code>
 +trust anchor ca.crt
 +# trust anchor --remove ca.crt
 </code> </code>
  
 **Ref:** **Ref:**
  
-https://unix.stackexchange.com/questions/104623/how-to-get-servers-ssl-certificate-in-a-human-readable-form+  * https://unix.stackexchange.com/questions/104623/how-to-get-servers-ssl-certificate-in-a-human-readable-form 
 +  * https://bbs.archlinux.org/viewtopic.php?id=235724
  • openssl.1546088791.txt.gz
  • 上一次變更: 2018/12/29 21:06
  • jz