OpenSSL Frequently Used Commands

1. Generate SSL Private key with passphrase
     #openssl genrsa -des3 -out server.key 1024

2. Generate SSL Private key without passphrase
     #openssl genrsa -out server.key 2048

3. Generate a CSR (Certificate Signing Request)
     #openssl req -new -key server.key -out server.csr

4. Check Open-ssl Version
     #openssl version -d  , openssl version -a
 

5. Check Key Password confirmation
     #openssl rsa -in xxxxxxxx.com.key.pem -out server.key

6. View certificate Details of pem File use the Below Command
     #openssl x509 -text -in xxxxxx.pem

7. Generate The Open-ssl with Version 3
     #openssl x509 -req -days 365 -in domain.com.csr.pem -extfile /etc/pki/tls/openssl.cnf -extensions v3_ca -signkey domain.com.key.pem -out domain.com.crt.pem

8. Remove Passphrase from Key
     #cp server.key server.key.org
     #openssl rsa -in server.key.org -out server.key

9. Set new passpharse
     # openssl rsa -des3 -in server.key -out server.key.new
     # mv server.key.new server.key

10. Generating a Self-Signed Certificate
     #openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt

11. View the certificate Information
     #openssl x509 -noout -fingerprint -text < server.cert > host.info

12. View who issued the cert?
     #openssl x509 -noout -in cert.pem -issuer

13. View to whom was it issued
     #openssl x509 -noout -in cert.pem -subject

14. View the valid date of the certificate
     #openssl x509 -noout -in cert.pem -dates

15. Generating P12 Certificate for Tomcat
     #/usr/sfw/bin/openssl pkcs12 -export -in public-cert.pem -inkey private-key.pem -out my_pkcs12.p12

16. View PKCS12 cert
     #openssl pkcs12 -info -nodes -in <cert.p12>

17. Generate the key and CSR with SHA1 method
     #openssl genrsa -des3 -out server.key.pem 2048
     #openssl req -new -sha1 -key server.com.key.pem -out server.csr.pem

18. Converting the certificate in .cer format to .pem format
     #openssl x509 -inform der -in servercert.cer -out servercert.pem

19. Mergring and converting Server Private key, Server Certificate and CA certificate into PKCS#12 format
     #openssl pkcs12 -export -in servercert.pem -inkey  serverprivatekey.pem -name "MY CERTIFICATE" -certfile cacert.pem -out mycert.p12