ssl

Contents:

• openssl: download a certificate
• openssl: auth via tls certificate in s_client
• openssl: check to see if ssl3 works
• openssl: check to see if tls 1.2 works
• certificate files
  • rhel: add a certificate to trust store
  • debian: add a certificate to the trust store
  • pkcs #12: extract key and cert from keystore
  • pkcs #12: create a file
  • see a cert’s fingerprint
• creating a certificate
  • create a key
  • create a certificate signing request (csr)
  • create a csr with a custom configuration
  • creating a key and csr in 1 step
  • create a self-signed certificate
  • ca: sign the csr
  • ca: update the db
  • ca: format of the index.txt file
  • remove the passphrase form a key
• Where I got this information
• look at certs!
  • openssl: check a private key
  • openssl: check a certificate
  • openssl: check the subject in a certificate
  • keytool: check expiration
  • openssl: check key file
  • openssl: check modulus of both key and certificate