openssl

PKCS8 is the eighth of the Public-Key Cryptography Standards (PKCS) and is a syntax for storing private key material. The private keys may be encrypted with a symmetric key algorithm. If the usage of your key requires it to be in plain text, make sure it is stored in a secured location. If at all … [Read more...] about PKCS8 (PKCS #8) format – openssl pkcs8

The s_client command from OpenSSL is a helpful test client for troubleshooting remote SSL or TLS connections. The post strives to walk you through various examples of testing SSL connections with different ciphers, TLS versions, and SSL server certificate analysis. Testing SSL configuration on … [Read more...] about openssl s_client commands and examples

Use the openssl genrsa command to generate an RSA private key. The generated RSA private key can be customized by specifying the cipher algorithm and key size. openssl genpkey vs genrsa The openssl genpkey utility has superseded the genrsa utility. While the genrsa command is still valid and … [Read more...] about openssl genrsa – Generate RSA keys with OpenSSL

To generate random bytes with openssl, use the openssl rand utility which is the openssl random number generator. This utility utilizes a CSPRNG, a cryptographically secure pseudo-random number generator. As of v1.1.1, openssl will use a trusted entropy source provided by the operating system to … [Read more...] about openssl rand – Generate random numbers and passwords

The following examples will go through how to use curl with authentication. For obvious reasons, public APIs do not require authentication but private APIs will require authentication using authorization headers with basic auth, a bearer token header using a JWT (Javascript Web Token), or with a … [Read more...] about curl authentication – Certificate, Bearer token, and Basic Auth

The openssl crl command and utility will process CRL (Certificate Revocation List) files in both DER and PEM format. CRL locations can be found on the X.509 certificate itself, under the "CRL Endpoints" section. Here is a screenshot from the Mozilla Firefox certificate viewer of the SSL … [Read more...] about openssl crl

Introduction to PKCS7 What is PKCS7? It is a standard in the "Public Key Cryptography Standards" used as a cryptographic message syntax and as a format for an X.509 certificate and corresponding chain. A PKCS7 certificate can be formatted as both PEM and DER. For a deep dive, check out the … [Read more...] about PKCS7