-config
option to specify that file. The environment variable OPENSSL_CONF can be used to specify the location of the configuration file. If the environment variable is not specified, a default file is created in the default certificate storage area called openssl.cnf. The settings in this default configuration file depend on the flags set when the version of OpenSSL being used was built.quit
command or by issuing a termination signal with either Ctrl+C or Ctrl+D. The following is a sample interactive session in which the user invokes the prime command twice before using the quit command to terminate the session.openssl command [ command_options ] [ command_arguments ]
. The help command is no different, but it does have its idiosyncrasies. To view the top-level help menu, you can call openssl as follows.openssl command -help
. Both commands will yield the same output; the help menu displayed will be exactly the same.Command | Description |
---|---|
asn1parse | Parse an ASN.1 sequence. |
ca | Certificate Authority (CA) Management. |
ciphers | Cipher Suite Description Determination. |
cms | CMS (Cryptographic Message Syntax) utility. |
crl | Certificate Revocation List (CRL) Management. |
crl2pkcs7 | CRL to PKCS#7 Conversion. |
dgst | Message Digest calculation. MAC calculations are superseded by mac(1). |
dhparam | Generation and Management of Diffie-Hellman Parameters. Superseded by genpkey(1) and pkeyparam(1). |
dsa | DSA Data Management. |
dsaparam | DSA Parameter Generation and Management. Superseded by genpkey(1) and pkeyparam(1). |
ec | EC (Elliptic curve) key processing. |
ecparam | EC parameter manipulation and generation. |
enc | Encoding with Ciphers. |
engine | Engine (loadable module) information and manipulation. |
errstr | Error Number to Error String Conversion. |
gendsa | Generation of DSA Private Key from Parameters. Superseded by genpkey(1) and pkey(1). |
genpkey | Generation of Private Key or Parameters. |
genrsa | Generation of RSA Private Key. Superseded by genpkey(1). |
info | Display diverse information built into the OpenSSL libraries. |
kdf | Key Derivation Functions. |
mac | Message Authentication Code Calculation. |
nseq | Create or examine a Netscape certificate sequence. |
ocsp | Online Certificate Status Protocol utility. |
passwd | Generation of hashed passwords. |
pkcs12 | PKCS#12 Data Management. |
pkcs7 | PKCS#7 Data Management. |
pkcs8 | PKCS#8 format private key conversion tool. |
pkey | Public and private key management. |
pkeyparam | Public key algorithm parameter management. |
pkeyutl | Public key algorithm cryptographic operation utility. |
prime | Compute prime numbers. |
rand | Generate pseudo-random bytes. |
rehash | Create symbolic links to certificate and CRL files named by the hash values. |
req | PKCS#10 X.509 Certificate Signing Request (CSR) Management. |
rsa | RSA key management. |
rsautl | RSA utility for signing, verification, encryption, and decryption. Superseded by pkeyutl(1). |
s_client | This implements a generic SSL/TLS client which can establish a transparent connection to a remote server speaking SSL/TLS. |
s_server | This implements a generic SSL/TLS server which accepts connections from remote clients speaking SSL/TLS. |
s_time | SSL Connection Timer. |
sess_id | SSL Session Data Management. |
smime | S/MIME mail processing. |
speed | Algorithm Speed Measurement. |
spkac | SPKAC printing and generating utility. |
srp | Maintain SRP password file. |
storeutl | Utility to list and display certificates, keys, CRLs, etc. |
ts | Time Stamping Authority tool (client/server). |
verify | X.509 Certificate Verification. |
version | OpenSSL Version Information. |
x509 | X.509 Certificate Data Management. |