|
⇤ ← Revision 1 as of 2008-05-08 11:16:20
Size: 704
Comment:
|
Size: 1010
Comment:
|
| Deletions are marked like this. | Additions are marked like this. |
| Line 3: | Line 3: |
| /etc/ssl/private# openssl s_client -connect mpemail:443 -showcerts | Kontrolle der installierten Zertifikate entsprechend der Port-Nummer {{{ /etc/ssl/private# openssl s_client -connect <host>:443 -showcerts }}} {{{ |
| Line 5: | Line 11: |
| openssl pkcs12 -in cert-203613067.p12 -out mpemail.pem -clcerts -nokeys | }}} |
| Line 7: | Line 13: |
| openssl x509 -in mpemail.pem -noout -text | Extrahiere '''Public''' key aus Zertifikat in PKCS12-Form {{{ openssl pkcs12 -in <certificate>.p12 -out <certificate>.pem -clcerts -nokeys }}} Extrahiere '''Private''' key aus Zertifikat in PKCS12-Form (Das Password im Private Key bleibt erhalten!) {{{ openssl pkcs12 -in <certificate>.p12 -out <certificate>-pw-key.pem -nocerts }}} Bei Bedarf das Password aus dem Private Key entfernen (Vorsicht!!!) {{{ openssl rsa -in <certificate>-pw-key.pem -out <certificate>-key.pem }}} Listet Zertifikat in Text-Form {{{ openssl x509 -in <certificate>.pem -noout -text }}} |
| Line 11: | Line 41: |
openssl pkcs12 -in cert-203613067.p12 -out mpemail-pw-key.pem -nocerts pkcs12 -in cert-203613067.p12 -out mpemai.pem -clcerts -nokeys openssl pkcs12 -in cert-203613067.p12 -out mpemail.pem -clcerts -nokeys openssl rsa -in mpemail-pw-key.pem -out mpemail-key.pem |
Nuetzliche Befehle mit openssl
Kontrolle der installierten Zertifikate entsprechend der Port-Nummer
/etc/ssl/private# openssl s_client -connect <host>:443 -showcerts
c_rehash
Extrahiere Public key aus Zertifikat in PKCS12-Form
openssl pkcs12 -in <certificate>.p12 -out <certificate>.pem -clcerts -nokeys
Extrahiere Private key aus Zertifikat in PKCS12-Form (Das Password im Private Key bleibt erhalten!)
openssl pkcs12 -in <certificate>.p12 -out <certificate>-pw-key.pem -nocerts
Bei Bedarf das Password aus dem Private Key entfernen (Vorsicht!!!)
openssl rsa -in <certificate>-pw-key.pem -out <certificate>-key.pem
Listet Zertifikat in Text-Form
openssl x509 -in <certificate>.pem -noout -text
openssl pkcs7 -in tacar_certs.pem -outform pem -out tacar_certsout.pem -print_certs
pkcs12 -inkey ../Antrag/mpemailkey.pem -in cert-203613067.pem -out cert-203613067.p12 -export -name "MPEMail"