Use the openssl verify command to verify a certificate chain, certificate, CRL, and matching key pairs. If you work with TLS certificates, private keys, intermediate certificates, and trust chains, understanding how to use OpenSSL to verify certificates is one of the most useful troubleshooting … [Read more...] about OpenSSL Verify: Certificate, Chain, CRL, and Key Examples
openssl s_client commands and examples
The s_client command from OpenSSL is a helpful test client for troubleshooting remote SSL or TLS connections as well as check whether a certificate is valid, trusted, and has a complete certificate chain. The post strives to walk you through various examples of testing SSL connections with different … [Read more...] about openssl s_client commands and examples
Convert PEM to other formats
Before covering how to convert to pem from different certificate formats let us define what each of the certificate file extensions means. .pem - Privacy Enhanced Mail Certificate. A PEM file is Base64 encoded and may be an X.509 certificate file, a private key file, or any other key material. … [Read more...] about Convert PEM to other formats
How to Install OpenSSL on Ubuntu
This article will demonstrate how to install OpenSSL on the Ubuntu Linux platform. Most if not all installations of Ubuntu include OpenSSL by default. If you find yourself with an instance of Ubuntu that does not already have OpenSSL installed, then this article is for you. The examples in this … [Read more...] about How to Install OpenSSL on Ubuntu
openssl pkcs12 legacy
With OpenSSL v3.x, newer cryptographic algorithms are used that may not be supported in older versions of Java, Windows, etc and will require the openssl pkcs12 legacy option. The -legacy option is useful and even required when creating a pkcs12 keystore for use in older operating systems and … [Read more...] about openssl pkcs12 legacy
pkcs12
A pkcs12 keystore is commonly used for both S/MIME User Certificates and SSL/TLS Server Certificates. The keystore may contain both private keys and their corresponding certificates with or without a complete chain. The keystore’s purpose is to store the credential of an identity, being a person, … [Read more...] about pkcs12
pfx password
A pfx password protects your private key stored in your keystore. The private key in the keystore also has a password and its password should be the same as the pfx keystore password. When creating the keystore and protecting it with a password the passwords will originally match. The place to be … [Read more...] about pfx password
OpenSSL Self Signed Certificate
This article will demonstrate how to use OpenSSL to create a self signed certificate. First things first. What is a self signed certificate? A self signed certificate is exactly what it sounds like. The private key of the key pair signs its own SSL certificate. It is not signed by a CA … [Read more...] about OpenSSL Self Signed Certificate