List available EC curves, that OpenSSL library supports: Openssl ec -in example.ec.key -text -noout Openssl ecparam -genkey -name | openssl ec -out example.ec.key curve is to be replaced with: prime256v1, secp384r1, secp521r1, or any other supported elliptic curve: Openssl rsa -des3 -in example.key -out example_with_pass.key Openssl rsa -in example.key -out example.keyĮncrypt existing private key with a pass phrase: If the key has a pass phrase, you’ll be prompted for it: Openssl genrsa -aes256 -out example.key Ĭheck your private key. Generate new RSA key and encrypt with a pass phrase based on AES CBC 256 encryption: Openssl rsa -in example.key -noout -modulus In the commands below, replace with the key size (For example, 2048, 4096, 8192). For example, I skip encryption and decryption, or using openssl for CA management. Surely, this is not a complete list, but it covers the most common use cases and includes those I’ve been working with.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |