OpenSSL cheat sheet
To start this section, let me say that this covers the commands used in this chapter, as well as many of the commands you might use in checking, requesting, and issuing certificates. Some remote debugging commands are also demonstrated. OpenSSL has hundreds of options, so as always, the man page is your friend to more fully explore its capabilities. In a pinch, if you google OpenSSL cheat sheet, you'll find hundreds of pages showing common OpenSSL commands.
Here are some steps and commands that are common in certificate creation:
- To create a private key for a new certificate (on the applicant), run the following command:
openssl genrsa -des3 -out private.key <bits>
- To create a CSR for a new certificate (on the applicant), run the following command:
openssl req -new -key private.key -out server.csr
- To verify a CSR signature, run the following command:
openssl req -in example.csr -verify
- To check CSR content, run the following command...