The openssl passwd command can be used to compute password hashes. openssl passwd examples To compute the password hash without a salt, run the following command: openssl passwd -crypt password To compute a salted password hash, run the following command using the crypt algorithm (which … [Read more...] about openssl passwd
openssl ca
The openssl ca command and utility is a lightweight piece of software that can be used to perform minimal CA (Certification Authority) functions. The command can sign and issue new certificates including self-signed Root CA certificates, generate CRLs (Certificate Revocation Lists), and other CA … [Read more...] about openssl ca
OCSP (Online Certificate Status Protocol)
The OCSP, or Online Certificate Status Protocol, is a protocol designed to deliver the revocation status of an X.509 SSL or TLS certificate. In theory, it is more performant than its CRL (Certificate Revocation List) alternative. Responses are required to be delivered by the CA (Certification … [Read more...] about OCSP (Online Certificate Status Protocol)
openssl list
The openssl list command and utility is used to show supported algorithms and features as well as algorithms and features that have been disabled. openssl list may be used across various operating systems and versions to display supported features as well as disabled features. To display a list … [Read more...] about openssl list
openssl dsa
What is DSA? DSA is short for Digital Signature Algorithm, an asymmetric digital signature algorithm used primarily for digital signatures and this article will use the openssl dsa utility to demonstrate its use. DSA like RSA can be used for both digital signatures and encryption, but is primarily … [Read more...] about openssl dsa
openssl dgst
Use the openssl dgst command and utility to output the hash of a given file. The output will be in hexadecimal, and the default hash function is sha256, although this can be overridden. md5 and sha1 are both common digest functions that are still routinely found in practice and can be specified in … [Read more...] about openssl dgst
ASN1 (Abstract Syntax Notation One)
ASN1, also known as ASN.1, or spelled out as Abstract Syntax Notation One, is a method of defining a data structure primarily used in cryptography and for the purposes of this article, we will discuss its use in X.509 digital certificates. ASN1 is used to define the format of certificates in its … [Read more...] about ASN1 (Abstract Syntax Notation One)
openssl ciphers
The openssl ciphers utility is a tool that will display, list, and check supported ciphers. It can test your environment to help you decide which cipher list is appropriate for your setup. openssl ciphers list To display a verbose listing of all ciphers, run the following command: openssl … [Read more...] about openssl ciphers