欢迎您访问程序员文章站本站旨在为大家提供分享程序员计算机编程知识!
您现在的位置是: 首页

openssl常用命令 博客分类: 常用命令 openssl shell linux apns aes base64

程序员文章站 2024-03-19 23:45:52
...
1、How do I generate an RSA key?
# default 512-bit key, sent to standard output
openssl genrsa

# 1024-bit key, saved to file named mykey.pem
openssl genrsa -out mykey.pem 1024

# same as above, but encrypted with a passphrase
openssl genrsa -des3 -out mykey.pem 1024

2、How do I generate a public RSA key?
openssl rsa -in mykey.pem -pubout

3、RSA encrypt with public key?
cat plain.txt | openssl rsautl -encrypt -pubin -inkey rsa.pub.pem > cipher.txt

4、RSA decrypt with private key?
cat cipher.txt | openssl rsautl -decrypt -inkey rsa.pri.pem

5、Abstract the common Modulus from the public key?
OpenSSL> rsa -pubin -in public.pem -modulus -noout
OpenSSL> rsa -in private.pem -modulus

6、Abstract the Public Exponent Values?
OpenSSL> rsa -pubin -in public.pem -text -noout

7、Abstract the Private Exponent Values?
OpenSSL> rsa -in private.pem -text -noout

8、Convert pkcs#12 Private Key to pkcs#8 pem?
openssl pkcs8 -topk8 -inform PEM -outform PEM -in private_key.pem -out private_key.pem -nocrypt
或者
pkcs8 -topk8 -inform PEM -in rsa_private_key.pem -outform PEM -nocrypt

9、Extracting Certificate and Private Key Files from a .pfx File?
     1)Run the following command to export the private key: openssl pkcs12 -in certname.pfx -nocerts -out key.pem -nodes
     2)Run the following command to export the certificate: openssl pkcs12 -in certname.pfx -nokeys -out cert.pem
     3)Run the following command to remove the passphrase from the private key: openssl rsa -in key.pem -out server.key

10、Use openssl decode base64 encoding string?
openssl enc -in cipher.b6 -out cipher.bin -d -a

11、Use openssl to base64 encode/decode?
       1)encode:echo  "abc" | openssl base64
       2)decode:echo  "YWJjCg==" | openssl base64 -d

12、Use openssl to md5 encoding?
       echo -n "abc" | openssl md5

13、Use openssl to encode AES/DES?
       1)echo  "abc" | openssl aes-128-cbc -k 123 -base64
       2)echo   "U2FsdGVkX19sDbym0tiqS4AIvnWeF/tUkCr6x/ZV9bc=" | openssl aes-128-cbc -k 123 -base64 -d

14、convert p12 to apns pem.
openssl pkcs12 -in MyApnsCert.p12 -out MyApnsCert.pem -nodes -clcerts