6 openssl - OpenSSL command line tool
17 OpenSSL is a cryptography toolkit implementing the Secure Sockets Layer (SSL
18 v2/v3) and Transport Layer Security (TLS v1) network protocols and related
19 cryptography standards required by them.
21 The B<openssl> program is a command line tool for using the various
22 cryptography functions of OpenSSL's B<crypto> library from the shell.
25 o Creation of RSA, DH and DSA key parameters
26 o Creation of X.509 certificates, CSRs and CRLs
27 o Calculation of Message Digests
28 o Encryption and Decryption with Ciphers
29 o SSL/TLS Client and Server Tests
30 o Handling of S/MIME signed or encrypted mail
32 =head1 COMMAND SUMMARY
34 The B<openssl> program provides a rich variety of commands (I<command> in the
35 SYNOPSIS above), each of which often has a wealth of options and arguments
36 (I<command_opts> and I<command_args> in the SYNOPSIS).
38 =head2 STANDARD COMMANDS
44 Parse an ASN.1 sequence.
48 Certificate Authority (CA) Management.
52 Cipher Suite Description Determination.
56 Certificate Revocation List (CRL) Management.
60 CRL to PKCS#7 Conversion.
64 Message Digest Calculation.
68 Diffie-Hellman Data Management.
76 DSA Parameter Generation.
80 Encoding with Ciphers.
84 Error Number to Error String Conversion.
88 Generation of Diffie-Hellman Parameters.
92 Generation of DSA Parameters.
96 Generation of RSA Parameters.
100 Generation of hashed passwords.
104 PKCS#7 Data Management.
108 X.509 Certificate Signing Request (CSR) Management.
116 This implements a generic SSL/TLS client which can establish a transparent
117 connection to a remote server speaking SSL/TLS. It's intended for testing
118 purposes only and provides only rudimentary interface functionality but
119 internally uses mostly all functionality of the OpenSSL B<ssl> library.
123 This implements a generic SSL/TLS server which accepts connections from remote
124 clients speaking SSL/TLS. It's intended for testing purposes only and provides
125 only rudimentary interface functionality but internally uses mostly all
126 functionality of the OpenSSL B<ssl> library. It provides both an own command
127 line oriented protocol for testing SSL functions and a simple HTTP response
128 facility to emulate an SSL/TLS-aware webserver.
132 SSL Connection Timer.
136 SSL Session Data Management.
140 S/MIME mail processing.
144 Algorithm Speed Measurement.
148 X.509 Certificate Verification.
152 OpenSSL Version Information.
156 X.509 Certificate Data Management.
160 =head2 MESSAGE DIGEST COMMANDS
190 =head2 ENCODING AND CIPHER COMMANDS
198 =item B<bf bf-cbc bf-cfb bf-ecb bf-ofb>
202 =item B<cast cast-cbc>
206 =item B<cast5-cbc cast5-cfb cast5-ecb cast5-ofb>
210 =item B<des des-cbc des-cfb des-ecb des-ede des-ede-cbc des-ede-cfb des-ede-ofb des-ofb>
214 =item B<des3 desx des-ede3 des-ede3-cbc des-ede3-cfb des-ede3-ofb>
218 =item B<idea idea-cbc idea-cfb idea-ecb idea-ofb>
222 =item B<rc2 rc2-cbc rc2-cfb rc2-ecb rc2-ofb>
230 =item B<rc5 rc5-cbc rc5-cfb rc5-ecb rc5-ofb>
238 L<asn1parse(1)|asn1parse(1)>, L<ca(1)|ca(1)>, L<config(5)|config(5)>,
239 L<crl(1)|crl(1)>, L<crl2pkcs7(1)|crl2pkcs7(1)>, L<dgst(1)|dgst(1)>,
240 L<dhparam(1)|dhparam(1)>, L<dsa(1)|dsa(1)>, L<dsaparam(1)|dsaparam(1)>,
241 L<enc(1)|enc(1)>, L<gendsa(1)|gendsa(1)>,
242 L<genrsa(1)|genrsa(1)>, L<nseq(1)|nseq(1)>, L<openssl(1)|openssl(1)>,
243 L<passwd(1)|passwd(1)>,
244 L<pkcs12(1)|pkcs12(1)>, L<pkcs7(1)|pkcs7(1)>, L<pkcs8(1)|pkcs8(1)>,
245 L<req(1)|req(1)>, L<rsa(1)|rsa(1)>, L<s_client(1)|s_client(1)>,
246 L<s_server(1)|s_server(1)>, L<smime(1)|smime(1)>, L<spkac(1)|spkac(1)>,
247 L<verify(1)|verify(1)>, L<version(1)|version(1)>, L<x509(1)|x509(1)>,
248 L<crypto(3)|crypto(3)>, L<ssl(3)|ssl(3)>
252 The openssl(1) document appeared in OpenSSL 0.9.2