From 9f8a13c387edfb972116ad79385097fb3627bbd6 Mon Sep 17 00:00:00 2001 From: inference Date: Tue, 30 May 2023 00:39:23 +0100 Subject: [PATCH] Also verify server key. --- security/openssl_certificate_chain.adoc | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/security/openssl_certificate_chain.adoc b/security/openssl_certificate_chain.adoc index 8814e43..0040b9f 100644 --- a/security/openssl_certificate_chain.adoc +++ b/security/openssl_certificate_chain.adoc @@ -1,6 +1,6 @@ = OpenSSL Certificate Chain -Version: 0.0.0.5 +Version: 0.0.0.6 This documentation contains the complete set of commands to create a new OpenSSL self-signed @@ -45,6 +45,9 @@ Each key can be encrypted or unencrypted, with multiple encryption options; AES == Create Server Key `openssl genrsa -aes256 -out server-key.pem 2048` +== Verify Server Key +`openssl rsa -noout -text -in server-key.pem` + == Create Server Cerificate Signing Request `openssl req -new -sha256 -subj "/C=/ST=/L=/O=/CN=" -addext "subjectAltName = DNS.1:" -key server-key.pem -out server-csr.pem`