Openssl分析证书信息:修订间差异
来自三线的随记
(创建页面,内容为“=== online === openssl s_client -showcerts -connect 192.168.101.225:36443 <br /> === file === ==== cert ==== openssl x509 -noout -text -in ca.crt ==== key ====…”) |
小无编辑摘要 |
||
(未显示同一用户的3个中间版本) | |||
第1行: | 第1行: | ||
=== online === | === verify via online server === | ||
openssl s_client -showcerts -connect 192.168.101.225:36443 | openssl s_client -showcerts -connect 192.168.101.225:36443 | ||
=== file === | openssl s_client -showcerts -connect 192.168.101.225:36443 -servername your-domain.net | ||
openssl s_client -showcerts -connect domain:443 | openssl x509 -noout -dates | |||
openssl s_client -showcerts -connect 192.168.101.225:36443 | openssl x509 -noout -text | |||
=== verify via file === | |||
==== cert ==== | ==== cert ==== | ||
第17行: | 第22行: | ||
openssl rsa -in server.key -out server.key.insecure | openssl rsa -in server.key -out server.key.insecure | ||
<br /> | <br /> | ||
[[ | [[category:Linux]] | ||
[[Category:Http]] |
2023年10月17日 (二) 15:48的最新版本
verify via online server
openssl s_client -showcerts -connect 192.168.101.225:36443
openssl s_client -showcerts -connect 192.168.101.225:36443 -servername your-domain.net
openssl s_client -showcerts -connect domain:443 | openssl x509 -noout -dates
openssl s_client -showcerts -connect 192.168.101.225:36443 | openssl x509 -noout -text
verify via file
cert
openssl x509 -noout -text -in ca.crt
key
openssl rsa -noout -text -in myserver.key
csr
openssl req -noout -text -in myserver.csr
去掉key file 保护密码
openssl rsa -in server.key -out server.key.insecure