Openssl分析证书信息:修订间差异

来自三线的随记
(创建页面,内容为“=== online === openssl s_client -showcerts -connect 192.168.101.225:36443 <br /> === file === ==== cert ==== openssl x509 -noout -text -in ca.crt ==== key ====…”)
 
无编辑摘要
 
(未显示同一用户的3个中间版本)
第1行: 第1行:
=== online ===
=== verify via online server ===
  openssl s_client -showcerts -connect 192.168.101.225:36443
  openssl s_client -showcerts -connect 192.168.101.225:36443
<br />


=== file ===
openssl s_client -showcerts -connect 192.168.101.225:36443 -servername your-domain.net
 
openssl s_client -showcerts -connect domain:443 |  openssl x509 -noout -dates
 
openssl s_client -showcerts -connect 192.168.101.225:36443 | openssl x509 -noout -text
 
=== verify via file ===


==== cert ====
==== cert ====
第17行: 第22行:
  openssl rsa -in server.key -out server.key.insecure
  openssl rsa -in server.key -out server.key.insecure
<br />
<br />
[[分类:Linux]]
[[category:Linux]]
[[Category:Http]]

2023年10月17日 (二) 15:48的最新版本

verify via online server

openssl s_client -showcerts -connect 192.168.101.225:36443
openssl s_client -showcerts -connect 192.168.101.225:36443 -servername your-domain.net
openssl s_client -showcerts -connect domain:443 |  openssl x509 -noout -dates
openssl s_client -showcerts -connect 192.168.101.225:36443 | openssl x509 -noout -text

verify via file

cert

openssl x509 -noout -text -in ca.crt

key

openssl rsa -noout -text -in myserver.key

csr

openssl req -noout -text -in myserver.csr

去掉key file 保护密码

openssl rsa -in server.key -out server.key.insecure