Openssl分析证书信息

来自三线的随记

verify via online server

openssl s_client -showcerts -connect 192.168.101.225:36443
openssl s_client -showcerts -connect 192.168.101.225:36443 -servername your-domain.net
openssl s_client -showcerts -connect domain:443 |  openssl x509 -noout -dates
openssl s_client -showcerts -connect 192.168.101.225:36443 | openssl x509 -noout -text

verify via file

cert

openssl x509 -noout -text -in ca.crt

key

openssl rsa -noout -text -in myserver.key

csr

openssl req -noout -text -in myserver.csr

去掉key file 保护密码

openssl rsa -in server.key -out server.key.insecure