< 1 2 3 4 5 6 7 > >>   ∑:237  Sort:Date

OpenSSL "ca" Error "lookup failed for ca::database"
Why I am getting the "variable lookup failed for ca::database" error when running OpenSSL "ca" command? You are getting the "variable lookup failed for ca::database" error, because OpenSSL "ca" command can not find the required "database" option in the configuration file. For example, if you have th...
2016-09-08, ≈17🔥, 0💬

OpenSSL "req -verify" - Error "wrong signature length"
Why I am getting the "wrong signature length" error when running the OpenSSL "req -verify" command? If you are getting the "wrong signature length" error when running the OpenSSL "req -verify" command, the CSR you are trying to verify has invalid digital signature. There 2 main possibilities for a C...
2020-10-03, ≈16🔥, 1💬

OpenSSL "verify -untrusted" - Specify Untrusted Certificate
How to specify those intermediate CA certificates that form the signing chain for the server certificate for OpenSSl "verify" command? I have the certificate chain from the server saved in a file. If you have the server certificate chain saved in a file, you can provide it to the OpenSSL "verify" co...
2012-07-24, ≈16🔥, 0💬

OpenSSL "rsa -pubin" - View RSA Public Key
How to view contents of an RSA public key file using OpenSSL "rsa" command? If you want to view contents of an RSA public key stored in a file, you can use the OpenSSL "rsa -pubin" command as shown below: C:\Users\fyicenter&gt;\loc al\openssl\openssl.exeOpenSSL&gt; rsa -in my_rsa_pub.key -pu...
2017-01-29, ≈16🔥, 0💬

OpenSSL "req -text" - Print CSR in Text
How to print CSR information in text format using OpenSSL "req -text" command? If you want to see contents of a CSR file in text format, you can use the OpenSSL "req -text" command as shown below: C:\Users\fyicenter&gt;\loc al\openssl\openssl.exeOpenSSL&gt; req -in my_rsa.csr -text -noout Ce...
2016-12-04, ≈16🔥, 0💬

OpenSSL "req -config" - Using Configuration File
Can I use my own configuration file when running "req" command? Yes, you can specify your own configuration file using the "-config file" option when running the "req" command. OpenSSL configuration file allows you to control the behavior of the "req" command with the following options: utf8 - If se...
2016-11-03, ≈15🔥, 0💬

OpenSSL "rsautl -oaep" - OAEP Padding Option
How to use OAEP padding with OpenSSL "rsautl" command? I was told to encrypt a password using an RSA public key with OAEP padding. OpenSSL "rsautl" uses PKCS#1 v1.5 padding as the default padding schema. So if you want to use OAEP padding, you have to using the "-oaep" option as shown below: C:\User...
2017-04-15, ≈15🔥, 0💬

OpenSSL "ca" Error "failed to update database TXT_DB error number 2"
Why I am getting the "failed to update database TXT_DB error number 2" error when running OpenSSL "ca" command? If you are using the OpenSSL "ca" command to sign a CSR that has the same DN (Distinguished Name) fields as an old CSR you have signed before, you will get the "failed to update database T...
2016-09-13, ≈15🔥, 0💬

OpenSSL "ecparam -list_curves" - List of EC Curves
What EC curves are supported by OpenSSL for generating EC keys? I want a list of all EC curves. If you want a list of all EC curves, you can use the OpenSSL "ecparam" command as shown below: C:\Users\fyicenter&gt;\loc al\openssl\opensslOpenSSL&gt; ecparam -list_curves secp112r1 : SECG/WTLS c...
2017-06-23, ≈15🔥, 0💬

OpenSSL "x509 -req" - Error "my_ca.srl: No error"
Why I am getting the "my_ca.srl: No error" error when trying to sign a CSR with OpenSSL "x509" command? You are getting the "my_ca.srl: No error" error when using OpenSSL "x509" command to sign a CSR, because OpenSSL is not able to access the default serial number file: my_ca.srl. When using "x509" ...
2018-02-08, ≈15🔥, 0💬

OpenSSL "rsautl -encrypt" - Encryption with RSA Public Key
How to encrypt a file with an RSA public key using OpenSSL "rsautl" command? If you want to encrypt a file with an RSA public in order to send private message to the owner of the public key, you can use the OpenSSL "rsault -encrypt" command as shown below: C:\Users\fyicenter&gt;type clear.txt Th...
2017-06-11, ≈15🔥, 0💬

OpenSSL "req" - "prompt=no" Mode
How to use the "prompt=no" mode of the OpenSSL "req -new" command? I want to specify DN field values directly in the configuration file. You can use "prompt=no" mode of the OpenSSL "req -new" command as shown below, if you set "prompt=no" and provide DN (Distinguished Name) field values in the confi...
2016-11-02, ≈14🔥, 0💬

OpenSSL "ca -gencrl" - Generate CRL
How to generate a CRL using the OpenSSL "ca" command? I need to publish the CRL to inform users about certificates I have revoked. If you want to generate a CRL (Certificate Revocation List), you can use the OpenSSL "ca -gencrl" command as shown below: C:\Users\fyicenter&gt;\loc al\OpenSSL-Win32\...
2016-09-10, ≈14🔥, 0💬

OpenSSL "ca" Error "... directory for new certificate ..."
Why I am getting the "there needs to be defined a directory for new certificate to be placed in" error when running OpenSSL "ca" command? You are getting the "there needs to be defined a directory for new certificate to be placed in" error, because OpenSSL "ca" command can not find the required "new...
2016-09-09, ≈14🔥, 0💬

OpenSSL "ans1parse -strparse" - Extract ASN.1 Sub Structure
How to how extra an ASN.1 child structure using the OpenSSL "ans1parse" command? You can use the OpenSSL "ans1parse -strparse offset" command to extract an ASN.1 child structure from a nested ASN.1 structure. as shown in the test below: C:\Users\fyicenter&gt;\loc al\openssl\openssl.exeOpenSSL&am...
2016-09-30, ≈14🔥, 0💬

OpenSSL "req -new -reqexts" - Specify CSR V3 Extensions
How to specify x.509 v3 extensions options in the configuration file for generating CSR using the OpenSSL "req" command? You can use x.509 v3 extensions options when using OpenSSL "req -new" command to generate a CSR (Certificate Signing Request). The provided x509 extensions will be included in the...
2016-10-25, ≈14🔥, 0💬

OpenSSL "rsautl" - Encrypt Large File with RSA Key
How to encrypt a large file with an RSA public key using OpenSSL "rsautl" command? If you are trying to use an RSA public key to encrypt a file larger than the key size directly, you will get the "data too large for key size" error. One option to resolve the problem is to use the RSA-AES hybrid encr...
2017-06-07, ≈13🔥, 0💬

OpenSSL "ans1parse" - RSA Private Key in ASN.1 Structure
How to view the ASN.1 structure of an RSA private key using the OpenSSL "asn1parse" command? You can use the OpenSSL "asn1parse" command to view the ASN.1 structure of an RSA private key as shown in the test below: C:\Users\fyicenter&gt;\loc al\openssl\opensslgenrsa -out rsa_pri.key 512 Generati...
2016-09-27, ≈13🔥, 0💬

OpenSSL "ans1parse" - ASN.1 BIT STRING Field Type
What is ASN.1 BIT STRING field type? How to specify BIT STRING field type in OpenSSL "asn1parse" command? ASN.1 BIT STRING field is a primitive field that can be used to store bit strings of any size. To use ASN.1 BIT STRING field in OpenSSL "asn1parse" command, you need to remember the following ru...
2016-09-30, ≈13🔥, 0💬

OpenSSL "rsautl -pkcs" - PKCS#1 v1.5 Padding Option
How to use RSA PKCS#1 v1.5 padding with OpenSSL "rsautl" command? I was told to encrypt a password using an RSA public key with PKCS#1 padding. OpenSSL "rsautl" uses PKCS#1 v1.5 padding as the default padding schema. But you can explicitly specify PKCS#1 v1.5 padding by using the "-pkcs" option as s...
2017-05-12, ≈13🔥, 0💬

OpenSSL "crl -text" - View CRL in Test Format
How to view a CRL in text format using the OpenSSL "crl" command? I want to see what certificates are listed in the CRL. If you want to view the content of a CRL (Certificate Revocation List), you can use the OpenSSL "crl -text" command as shown below: C:\Users\fyicenter&gt;\loc al\OpenSSL-Win32\...
2016-09-10, ≈13🔥, 0💬

OpenSSL "ans1parse" - ASN.1 OCTET STRING Field Type
What is ASN.1 OCTET STRING field type? How to specify OCTET STRING field type in OpenSSL "asn1parse" command? ASN.1 OCTET STRING field is a primitive field that can be used to store byte strings of any size. To use ASN.1 OCTET STRING field in OpenSSL "asn1parse" command, you need to remember the fol...
2016-09-28, ≈13🔥, 0💬

Download and Install OpenSSL slproweb Binary for Windows
How to download OpenSSL for Windows? I heard that OpenSSL is a nice free tool to manage keys and certificates. You can download and install OpenSSL Windows version using these steps: 1. Go to the https://slproweb.com/products/ Win32OpenSSL.htmlWebsite. 2. Scroll down and select the latest version th...
2018-01-19, ≈13🔥, 0💬

OpenSSL "verify -CAfile" - Specify Root CA Certificate
How to specify the root CA certificates that close the signing chain for the server certificate for OpenSSl "verify" command? I have downloaded the root CA certificate in a file. If you have the root CA certificate downloaded in a file, you can provide it to the OpenSSL "verify" command using the "-...
2012-07-24, ≈12🔥, 0💬

< 1 2 3 4 5 6 7 > >>   ∑:237  Sort:Date