☰

Updated compute/ssl-debug.md

Dave committed 2020-04-17 17:17:20 +0000 commit 6938d0879043d9abb4a06c11e827042fcd9bef53

				compute/ssl-debug.md
			
          @@ -20,4 +20,13 @@ $ openssl s_client -servername \<hostname> -connect \<hostname>:443 -CAfile \<Ro

           $ openssl x509 -inform DER -in cert.der -outform PEM -out cert.pem

           ### Verify cert chain

          -$ openssl verify -CAfile /etc/ssl/cert.pem -untrusted intermediate.pem cert.pem

          \ No newline at end of file

          +$ openssl verify -CAfile /etc/ssl/cert.pem -untrusted intermediate.pem cert.pem

          +

          +### Exctract certs from pkcs12 file

          +$ openssl pkcs12 -in \<file.pfx> -nodes

          +

          +### Extract keys from pkcs12 file

          +$ openssl pkcs12 -in \<file.pfx> -nocerts

          +

          +### Remove password from key PEM

          +$ openssl rsa -in \<protected.pem> -out \<unprotected.pem>

          \ No newline at end of file

...	...	@@ -20,4 +20,13 @@ $ openssl s_client -servername \<hostname> -connect \<hostname>:443 -CAfile \<Ro
20	20	$ openssl x509 -inform DER -in cert.der -outform PEM -out cert.pem
21	21
22	22	### Verify cert chain
23		-$ openssl verify -CAfile /etc/ssl/cert.pem -untrusted intermediate.pem cert.pem
...	...	\ No newline at end of file
	0	+$ openssl verify -CAfile /etc/ssl/cert.pem -untrusted intermediate.pem cert.pem
	1	+
	2	+### Exctract certs from pkcs12 file
	3	+$ openssl pkcs12 -in \<file.pfx> -nodes
	4	+
	5	+### Extract keys from pkcs12 file
	6	+$ openssl pkcs12 -in \<file.pfx> -nocerts
	7	+
	8	+### Remove password from key PEM
	9	+$ openssl rsa -in \<protected.pem> -out \<unprotected.pem>
...	...	\ No newline at end of file