We earn commission when you buy through affiliate links.
This does not influence our reviews or recommendations.Learn more.
In this article, I will talk about frequently used OpenSSL commands to help you in the real world.
Some of the abbreviations related to certificates.
Note:SSL/TLS operation coursewould be helpful if you are not familiar with the terms.
I have also included sha256 as its considered most secure at the moment.
Ex:to have self-signed valid for two years.
I have included 2048 for stronger encryption.
Verify Certificate File
If you would like to validate certificate data like CN, OU, etc.
then you’ve got the option to use an above command which will give you certificate details.
Certificate issuer authority signs every certificate and in case you should probably check them.
Tip:it’s possible for you to also include chain certificate by passing chain as below.
The above command will help you to see the contents of the PKCS12 file.
This is very handy to validate the protocol, cipher, and cert details.
It will show you a date in notBefore and notAfter syntax.
notAfter is one you will have to verify to confirm if a certificate is expired or still valid.
If activated, you will get CONNECTED else handshake failure.
Of course, you will have to change the cipher and URL, which you want to test against.
If the mentioned cipher is accepted, then you will get CONNECTED else handshake failure.
I hope the above commands help you to know more about OpenSSL to manageSSL certificatesfor your website.
