openssl

Introduction to PKCS7 What is PKCS7? It is a standard in the "Public Key Cryptography Standards" used as a cryptographic message syntax and as a format for an X.509 certificate and corresponding chain. A PKCS7 certificate can be formatted as both PEM and DER. For a deep dive, check out the … [Read more...] about PKCS7

Use the openssl verify function to verify a certificate chain. openssl verify certificate chain To verify a certificate and its chain for a given website, run the following command: openssl verify -CAfile chain.pem www.example.org.pem Where -CAfile chain.pem is the downloaded … [Read more...] about openssl verify – Verify a certificate and certificate chain

The openssl passwd command can be used to compute password hashes. openssl passwd examples To compute the password hash without a salt, run the following command: openssl passwd -crypt password To compute a salted password hash, run the following command using the crypt algorithm (which … [Read more...] about openssl passwd

The openssl ca command and utility is a lightweight piece of software that can be used to perform minimal CA (Certification Authority) functions. The command can sign and issue new certificates including self-signed Root CA certificates, generate CRLs (Certificate Revocation Lists), and other CA … [Read more...] about openssl ca

The openssl list command and utility is used to show supported algorithms and features as well as algorithms and features that have been disabled. openssl list may be used across various operating systems and versions to display supported features as well as disabled features. To display a list … [Read more...] about openssl list

The openssl ec command and utility can be used to process your EC (Elliptic Curve) keys. This article will walk you through examples on processing EC keys with the openssl ec utility as well as the openssl ecparam utility. An EC private key header and footer is formatted as follows: This … [Read more...] about openssl ec

What is DSA? DSA is short for Digital Signature Algorithm, an asymmetric digital signature algorithm used primarily for digital signatures and this article will use the openssl dsa utility to demonstrate its use. DSA like RSA can be used for both digital signatures and encryption, but is primarily … [Read more...] about openssl dsa

Use the openssl dgst command and utility to output the hash of a given file. The output will be in hexadecimal, and the default hash function is sha256, although this can be overridden. md5 and sha1 are both common digest functions that are still routinely found in practice and can be specified in … [Read more...] about openssl dgst