Linux openssl - Revision history

Jfreier: /* Create a server cert from CA */

2021-05-22T14:39:12Z

‎Create a server cert from CA

Jfreier at 14:11, 22 May 2021

2021-05-22T14:11:18Z

Jfreier: /* Create a CA Cert */

2021-05-22T13:49:37Z

‎Create a CA Cert

Jfreier at 13:48, 22 May 2021

2021-05-22T13:48:52Z

Jfreier at 03:46, 6 May 2021

2021-05-06T03:46:42Z

Jfreier at 02:41, 6 May 2021

2021-05-06T02:41:06Z

Jfreier at 02:34, 6 May 2021

2021-05-06T02:34:36Z

Jfreier: /* Encrypt a binary file with a public key */

2016-03-17T21:27:49Z

‎Encrypt a binary file with a public key

Jfreier: /* Encrypt a binary file with a public key */

2016-03-17T15:40:27Z

‎Encrypt a binary file with a public key

Jfreier at 15:40, 17 March 2016

2016-03-17T15:40:09Z

@@ Line 46: / Line 46: @@
    openssl x509 -in server.crt -text -noout
+. Extra!! You might need to create pem containing both the private key and cert.
 == Encrypt a text file with a public key ==

@@ Line 28: / Line 28: @@
 == Create a CA Cert ==
   openssl req -x509 -new -nodes -key private.pem -sha256 -days 1825 -out CA.pem
 == Encrypt a text file with a public key ==

@@ Line 27: / Line 27: @@
 == Create a CA Cert ==
-  openssl req -x509 -new -nodes -key myCA.key -sha256 -days 1825 -out myCA.pem
+  openssl req -x509 -new -nodes -key private.pem -sha256 -days 1825 -out CA.pem
 == Encrypt a text file with a public key ==

@@ Line 25: / Line 25: @@
 Below will create a public cer file.
   openssl req -new -x509 -key privatekey.pem -out publickey.cer -days 365
 == Encrypt a text file with a public key ==

@@ Line 128: / Line 128: @@
 or
-   echo "data" > openssl dgst -sha256 -sign private-key.pem -out signature.sha256
+   echo "data" | openssl dgst -sha256 -sign private-key.pem -out signature.sha256
 To verify a data file by its signature using a public key.
    openssl dgst -sha256 -verify public-key.pem -signature signature.sha256 data.txt

← Older revision		Revision as of 02:41, 6 May 2021
Line 121:		Line 121:
	openssl also works as a pipe:		openssl also works as a pipe:
	$> echo "some text!" \| openssl s_client ...		$> echo "some text!" \| openssl s_client ...
		+
		+	== Sign and Verify ==
		+	To some a data file and create a sign file using a private key.
		+	openssl dgst -sha256 -sign private-key.pem -out signature.sha256 data.txt
		+
		+	or
		+
		+	echo "data" > openssl dgst -sha256 -sign private-key.pem -out signature.sha256
		+
		+	To verify a data file by its signature using a public key.
		+	openssl dgst -sha256 -verify public-key.pem -signature signature.sha256 data.txt

← Older revision		Revision as of 02:34, 6 May 2021
Line 100:		Line 100:
	Decode		Decode
	openssl enc -aes-256-cbc -d -a -in file.txt.enc -out file.txt		openssl enc -aes-256-cbc -d -a -in file.txt.enc -out file.txt
		+
		+	== Start Server and Client ==
		+	I have not tried this, but it looked cool so I grabbed it.
		+
		+	Create a server
		+	$> openssl s_server -accept portNum -cert myCert.pem -key myPKey.pem
		+
		+
		+	Create a connection to the server
		+	$> openssl s_client -showcerts -connect server:portNum
		+	-showcert shows the server's certificate(s).
		+
		+	to connect with a client's certificate:
		+	$> openssl s_client -connect server:portNum -cert myCert.pem -key myPKey.pem
		+
		+	to send some data:
		+	$> openssl s_client -connect server:portNum
		+	then type in console of client / server.
		+
		+	openssl also works as a pipe:
		+	$> echo "some text!" \| openssl s_client ...

@@ Line 40: / Line 40: @@
 The options mean:
-- smime - ssl command for S/MIME utility (smime(1))
+  - smime - ssl command for S/MIME utility (smime(1))
-- encrypt - chosen method for file process
+  - encrypt - chosen method for file process
-- binary - use safe file process. Normally the input message is converted to "canonical" format as required by the S/MIME specification, this switch disable it. It is necessary for all binary files (like a images, sounds, ZIP archives).
+  - binary - use safe file process. Normally the input message is converted to "canonical" format as required by the S/MIME specification, this switch disable it. It is necessary for all binary files (like a images, sounds, ZIP archives).
-- aes-256-cbc - chosen cipher AES in 256 bit for encryption (strong). If not specified 40 bit RC2 is used (very weak). (Supported ciphers)
+  - aes-256-cbc - chosen cipher AES in 256 bit for encryption (strong). If not specified 40 bit RC2 is used (very weak). (Supported ciphers)
-- in plainfile.zip - input file name
+  - in plainfile.zip - input file name
-- out encrypted.zip.enc - output file name
+  - out encrypted.zip.enc - output file name
-- outform DER - encode output file as binary. If is not specified, file is encoded by base64 and file size will be increased by 30%.
+  - outform DER - encode output file as binary. If is not specified, file is encoded by base64 and file size will be increased by 30%.
-- yourSslCertificate.pem - file name of your certificate's. That should be in PEM format.
+  - yourSslCertificate.pem - file name of your certificate's. That should be in PEM format.
 Known issue with files over 600MB, you need to split them.

@@ Line 37: / Line 37: @@
 This should encrypt a binary file with a public key.
-   openssl smime -encrypt -binary -aes256 -in plainfile.zip -out encrypted.zip.enc -outform DER yourSslCertificate.pem
+   openssl smime -encrypt -binary -aes256 -in plainfile.zip -out encrypted.zip.enc -outform DER yourSslCertificate.cer
 The options mean:

@@ Line 10: / Line 10: @@
 This is a real example of public private key.
-== Create a public & private key. ==
+== Create a public & private key and or x.509 cert. ==
 '''Create a private key.'''
@@ Line 22: / Line 22: @@
 This will calculate the public key from the private key.
 == Encrypt a text file with a public key ==