OpenSSL cheatsheet

openssl-cheatsheet.md

OpenSsl Cheat Sheet

Generate Key

We can use openssl Command-line utility to generate private key which will be used for generating certificate Signing Request and Certificate.

openssl genpkey -out server.key -algorithm RSA -pkeyopt rsa_keygen_bits:2048 -aes-128-cbc

You can name your key whatever you like for example key.pem | key.key | sample.hello doesn’t matter what you name the key but the general convention is to use .pem extension.

Generate Certificate Signing Request

CSR Configuration File

[req]
prompt = no
distinguished_name = dn
req_extensions = ext

[dn]
C = AU
ST = Victoria
L = Melbourne
O = awaisjamil
OU = integration
CN = www.awaisjamil.com
emailAddress = [email protected]

[ext]
subjectAltName = DNS:www.anz.com,DNS:anz.com

Generate CSR

openssl req -new -config ssl.cnf -key server.key -out server.csr

Generate Certificate

openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt

Generate Client Key and Certificate

Use thse same steps to generate client key and certificate.

openssl genpkey -out client.key -algorithm RSA -pkeyopt rsa_keygen_bits:2048 -aes-128-cbc

openssl req -new -config ssl.cnf -key client.key -out client.csr

openssl x509 -req -days 365 -in client.csr -signkey client.key -out client.crt