Chain VS Cert File
openssl verify -verbose -purpose sslserver -CAfile [CA인증서] [도메인 인증서]
Cert VS Private
openssl x509 -noout -modulus -in bgbtt_shlibaosi_cn.crt | openssl md5
openssl rsa -noout -modulus -in bgbtt_shlibaosi_cn.key | openssl md5
양쪽 명령어의 결과가 일치하는지 확인
암호화된 cert 또는 private key 푸는 명령어
- openssl x509 -outform der -in certificate.pem -out certificate.crt (Cert Key)
- openssl rsa -in [file1.key] -out [file2.key] (Private Key)
Connect Domain
openssl s_client -connect www.feistyduck.com:443
SAN List 뽑기
openssl x509 -noout -text -in mandeline.crt | grep DNS
PFX to PEM
openssl pkcs12 -in file.pfx -out file.pem -nodes