Let's make all the example formated the same, shall we?
This commit is contained in:
parent
8548d44270
commit
1675f6eb05
@ -334,19 +334,19 @@ demoCA/index.txt.
|
|||||||
|
|
||||||
Sign a certificate request:
|
Sign a certificate request:
|
||||||
|
|
||||||
openssl ca -in req.pem -out newcert.pem
|
openssl ca -in req.pem -out newcert.pem
|
||||||
|
|
||||||
Generate a CRL
|
Generate a CRL
|
||||||
|
|
||||||
openssl ca -gencrl -out crl.pem
|
openssl ca -gencrl -out crl.pem
|
||||||
|
|
||||||
Sign several requests:
|
Sign several requests:
|
||||||
|
|
||||||
openssl ca -infiles req1.pem req2.pem req3.pem
|
openssl ca -infiles req1.pem req2.pem req3.pem
|
||||||
|
|
||||||
Certify a Netscape SPKAC:
|
Certify a Netscape SPKAC:
|
||||||
|
|
||||||
openssl ca -spkac spkac.txt
|
openssl ca -spkac spkac.txt
|
||||||
|
|
||||||
A sample SPKAC file (the SPKAC line has been truncated for clarity):
|
A sample SPKAC file (the SPKAC line has been truncated for clarity):
|
||||||
|
|
||||||
|
@ -129,23 +129,23 @@ The PEM private key format uses the header and footer lines:
|
|||||||
|
|
||||||
To remove the pass phrase on a DSA private key:
|
To remove the pass phrase on a DSA private key:
|
||||||
|
|
||||||
C<openssl dsa -in key.pem -out keyout.pem>
|
openssl dsa -in key.pem -out keyout.pem
|
||||||
|
|
||||||
To encrypt a private key using triple DES:
|
To encrypt a private key using triple DES:
|
||||||
|
|
||||||
C<openssl dsa -in key.pem -des3 -out keyout.pem>
|
openssl dsa -in key.pem -des3 -out keyout.pem
|
||||||
|
|
||||||
To convert a private key from PEM to DER format:
|
To convert a private key from PEM to DER format:
|
||||||
|
|
||||||
C<openssl dsa -in key.pem -outform DER -out keyout.der>
|
openssl dsa -in key.pem -outform DER -out keyout.der
|
||||||
|
|
||||||
To print out the components of a private key to standard output:
|
To print out the components of a private key to standard output:
|
||||||
|
|
||||||
C<openssl dsa -in key.pem -text -noout>
|
openssl dsa -in key.pem -text -noout
|
||||||
|
|
||||||
To just output the public part of a private key:
|
To just output the public part of a private key:
|
||||||
|
|
||||||
C<openssl dsa -in key.pem -pubout -out pubkey.pem>
|
openssl dsa -in key.pem -pubout -out pubkey.pem
|
||||||
|
|
||||||
=head1 SEE ALSO
|
=head1 SEE ALSO
|
||||||
|
|
||||||
|
@ -135,23 +135,23 @@ The PEM private key format uses the header and footer lines:
|
|||||||
|
|
||||||
To remove the pass phrase on an RSA private key:
|
To remove the pass phrase on an RSA private key:
|
||||||
|
|
||||||
C<openssl rsa -in key.pem -out keyout.pem>
|
openssl rsa -in key.pem -out keyout.pem
|
||||||
|
|
||||||
To encrypt a private key using triple DES:
|
To encrypt a private key using triple DES:
|
||||||
|
|
||||||
C<openssl rsa -in key.pem -des3 -out keyout.pem>
|
openssl rsa -in key.pem -des3 -out keyout.pem
|
||||||
|
|
||||||
To convert a private key from PEM to DER format:
|
To convert a private key from PEM to DER format:
|
||||||
|
|
||||||
C<openssl rsa -in key.pem -outform DER -out keyout.der>
|
openssl rsa -in key.pem -outform DER -out keyout.der
|
||||||
|
|
||||||
To print out the components of a private key to standard output:
|
To print out the components of a private key to standard output:
|
||||||
|
|
||||||
C<openssl rsa -in key.pem -text -noout>
|
openssl rsa -in key.pem -text -noout
|
||||||
|
|
||||||
To just output the public part of a private key:
|
To just output the public part of a private key:
|
||||||
|
|
||||||
C<openssl rsa -in key.pem -pubout -out pubkey.pem>
|
openssl rsa -in key.pem -pubout -out pubkey.pem
|
||||||
|
|
||||||
=head1 SEE ALSO
|
=head1 SEE ALSO
|
||||||
|
|
||||||
|
@ -248,24 +248,25 @@ the signers certificates.
|
|||||||
|
|
||||||
Create a cleartext signed message:
|
Create a cleartext signed message:
|
||||||
|
|
||||||
openssl smime -sign -in message.txt -text -out mail.msg
|
openssl smime -sign -in message.txt -text -out mail.msg \
|
||||||
-signer mycert.pem
|
-signer mycert.pem
|
||||||
|
|
||||||
Create and opaque signed message
|
Create and opaque signed message
|
||||||
|
|
||||||
openssl smime -sign -in message.txt -text -out mail.msg -nodetach
|
openssl smime -sign -in message.txt -text -out mail.msg -nodetach \
|
||||||
-signer mycert.pem
|
-signer mycert.pem
|
||||||
|
|
||||||
Create a signed message, include some additional certificates and
|
Create a signed message, include some additional certificates and
|
||||||
read the private key from another file:
|
read the private key from another file:
|
||||||
|
|
||||||
openssl smime -sign -in in.txt -text -out mail.msg
|
openssl smime -sign -in in.txt -text -out mail.msg \
|
||||||
-signer mycert.pem -inkey mykey.pem -certfile mycerts.pem
|
-signer mycert.pem -inkey mykey.pem -certfile mycerts.pem
|
||||||
|
|
||||||
Send a signed message under Unix directly to sendmail, including headers:
|
Send a signed message under Unix directly to sendmail, including headers:
|
||||||
|
|
||||||
openssl smime -sign -in in.txt -text -signer mycert.pem -from steve@openssl.org
|
openssl smime -sign -in in.txt -text -signer mycert.pem \
|
||||||
-to someone@somewhere -subject "Signed message" | sendmail someone@somewhere
|
-from steve@openssl.org -to someone@somewhere \
|
||||||
|
-subject "Signed message" | sendmail someone@somewhere
|
||||||
|
|
||||||
Verify a message and extract the signer's certificate if successful:
|
Verify a message and extract the signer's certificate if successful:
|
||||||
|
|
||||||
@ -273,14 +274,16 @@ Verify a message and extract the signer's certificate if successful:
|
|||||||
|
|
||||||
Send encrypted mail using triple DES:
|
Send encrypted mail using triple DES:
|
||||||
|
|
||||||
openssl smime -encrypt -in in.txt -from steve@openssl.org -to someone@somewhere
|
openssl smime -encrypt -in in.txt -from steve@openssl.org \
|
||||||
-subject "Encrypted message" -des3 user.pem -out mail.msg
|
-to someone@somewhere -subject "Encrypted message" \
|
||||||
|
-des3 user.pem -out mail.msg
|
||||||
|
|
||||||
Sign and encrypt mail:
|
Sign and encrypt mail:
|
||||||
|
|
||||||
openssl smime -sign -in ml.txt -signer my.pem -text | openssl -encrypt -out mail.msg
|
openssl smime -sign -in ml.txt -signer my.pem -text \
|
||||||
-from steve@openssl.org -to someone@somewhere -subject "Signed and Encrypted message"
|
| openssl -encrypt -out mail.msg \
|
||||||
-des3 user.pem
|
-from steve@openssl.org -to someone@somewhere \
|
||||||
|
-subject "Signed and Encrypted message" -des3 user.pem
|
||||||
|
|
||||||
Note: the encryption command does not include the B<-text> option because the message
|
Note: the encryption command does not include the B<-text> option because the message
|
||||||
being encrypted already has MIME headers.
|
being encrypted already has MIME headers.
|
||||||
|
Loading…
x
Reference in New Issue
Block a user