1. Generate SSL Private key with passphrase
#openssl genrsa -des3 -out server.key 1024
2. Generate SSL Private key without passphrase
#openssl genrsa -out server.key 2048
3. Generate a CSR (Certificate Signing Request)
#openssl req -new -key server.key -out server.csr
4. Check Open-ssl Version
#openssl version -d , openssl version -a
5. Check Key Password confirmation
#openssl rsa -in xxxxxxxx.com.key.pem -out server.key
6. View certificate Details of pem File use the Below Command
#openssl x509 -text -in xxxxxx.pem
7. Generate The Open-ssl with Version 3
#openssl x509 -req -days 365 -in domain.com.csr.pem -extfile /etc/pki/tls/openssl.cnf -extensions v3_ca -signkey domain.com.key.pem -out domain.com.crt.pem
8. Remove Passphrase from Key
#cp server.key server.key.org
#openssl rsa -in server.key.org -out server.key
9. Set new passpharse
# openssl rsa -des3 -in server.key -out server.key.new
# mv server.key.new server.key
10. Generating a Self-Signed Certificate
#openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt
11. View the certificate Information
#openssl x509 -noout -fingerprint -text < server.cert > host.info
12. View who issued the cert?
#openssl x509 -noout -in cert.pem -issuer
13. View to whom was it issued
#openssl x509 -noout -in cert.pem -subject
14. View the valid date of the certificate
#openssl x509 -noout -in cert.pem -dates
15. Generating P12 Certificate for Tomcat
#/usr/sfw/bin/openssl pkcs12 -export -in public-cert.pem -inkey private-key.pem -out my_pkcs12.p12
16. View PKCS12 cert
#openssl pkcs12 -info -nodes -in <cert.p12>
17. Generate the key and CSR with SHA1 method
#openssl genrsa -des3 -out server.key.pem 2048
#openssl req -new -sha1 -key server.com.key.pem -out server.csr.pem
18. Converting the certificate in .cer format to .pem format
#openssl x509 -inform der -in servercert.cer -out servercert.pem
19. Mergring and converting Server Private key, Server Certificate and CA certificate into PKCS#12 format
#openssl pkcs12 -export -in servercert.pem -inkey serverprivatekey.pem -name "MY CERTIFICATE" -certfile cacert.pem -out mycert.p12