fachinformatiker-wiki

it's easy when it's here

User Tools

Site Tools

Trace: • Netzwerkkonfiguration • Zeitserver • Veeam Links • Audit Mode
linux:verschluesselung:openssl

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
linux:verschluesselung:openssl [2025/03/19 19:15] – [Reihenfolge einer Chain] gsyslinux:verschluesselung:openssl [2026/10/12 16:25] (current) – [Zertifikat erstellen] gsys
Line 6: Line 6:
  
 openssl x509 -in mail.example.com.pem -noout -text                            # Check contents of cert file openssl x509 -in mail.example.com.pem -noout -text                            # Check contents of cert file
 +openssl s_client -connect example.com:636
 openssl s_client -connect mail.example.com:587 -starttls smtp                 # SMTP START-TLS Zertifikat überprüfen openssl s_client -connect mail.example.com:587 -starttls smtp                 # SMTP START-TLS Zertifikat überprüfen
 openssl s_client -connect mail.example.com:465                                # SMTP SSL-Zertifikat überprüfen openssl s_client -connect mail.example.com:465                                # SMTP SSL-Zertifikat überprüfen
Line 101: Line 101:
 -----END CERTIFICATE----- -----END CERTIFICATE-----
 </code> </code>
 +https://success.qualys.com/support/s/article/000005824 \\
 +https://success.qualys.com/support/s/article/000003197
  
 ==== Befehle ==== ==== Befehle ====
Line 118: Line 120:
 openssl x509 -inform der -in certificate.cer -out certificate.pem                  #der in pem openssl x509 -inform der -in certificate.cer -out certificate.pem                  #der in pem
 openssl pkcs7 -inform der -in cacert.p7b -out cacert.pem                           #p7p in pem openssl pkcs7 -inform der -in cacert.p7b -out cacert.pem                           #p7p in pem
 +</code>
 +
 +Permissions
 +<code>
 +chmod 700 private                                                                  #private key folder
 +chmod 600 private.key                                                              #private key
 +chmod 755 certs                                                                    #public certs folder
 +chmod 644 cert.pem                                                                 #public key file
 </code> </code>
  
Line 130: Line 140:
 openssl req -newkey rsa:4096 -x509 -sha256 -days 3650 -nodes -out default.crt -keyout default.key   #self signed ssl openssl req -newkey rsa:4096 -x509 -sha256 -days 3650 -nodes -out default.crt -keyout default.key   #self signed ssl
 openssl dhparam -out /etc/nginx/certs/dhparam.pem 2048                                              #diffie-hellmann key openssl dhparam -out /etc/nginx/certs/dhparam.pem 2048                                              #diffie-hellmann key
 +
 +openssl req -x509 -newkey ec -pkeyopt ec_paramgen_curve:prime256v1 -days 3650 \
 +-nodes -keyout example.com.key -out example.com.crt -subj "/CN=example.com" \
 +-addext "subjectAltName=DNS:example.com,DNS:*.example.com"
 </code> </code>
linux/verschluesselung/openssl.1742408140.txt.gz · Last modified: by gsys