Teil I Aufbau und Betrieb einer Zertifizierungsinstanz - DFN-CERT

240 Anhang F. Aufrufparameter und Optionen von openssl
-key file use the private key contained in file
-keyform arg key file format
-keyout arg file to send the key to
-newkey rsa:bits generate a new RSA key of ’bits’ in size
-newkey dsa:file generate a new DSA key, parameters taken from CA in ’file’
-[digest] Digest to sign with (md5, sha1, md2, mdc2)
-config file request template file.
-new new request.
-x509 output a x509 structure instead of a cert. req.
-days number of days a x509 generated by -x509 is valid for.
-newhdr output "NEW" in the header lines
-asn1-kludge Output the ’request’ in a format that is wrong but some CA’s
have been reported as requiring
-extensions .. specify certificate extension section (override value in config file)
-reqexts .. specify request extension section (override value in config file)
rsa
rsa [options] outfile
where options are
-inform arg input format - one of DER NET PEM
-outform arg output format - one of DER NET PEM
-in arg input file
-passin arg input file pass phrase
-in arg input file
-out arg output file
-passout arg output file pass phrase
-des encrypt PEM output with cbc des
-des3 encrypt PEM output with ede cbc des using 168 bit key
-idea encrypt PEM output with cbc idea
-text print the key in text
-noout don’t print key out
-modulus print the RSA key modulus
-check verify key consistency
-pubin expect a public key in input file
-pubout output a public key
s_client
usage: s_client args
-host host - use -connect instead
-port port - use -connect instead
-connect host:port - who to connect to (default is localhost:4433)
-verify arg - turn on peer certificate verification
-cert arg - certificate file to use, PEM format assumed
-key arg - Private key file to use, PEM format assumed, in cert file if
not specified but cert file is.
-CApath arg - PEM format directory of CA’s
-CAfile arg - PEM format file of CA’s
-reconnect - Drop and re-make the connection with the same Session-ID
-pause - sleep(1) after each read(2) and write(2) system call
-showcerts - show all certificates in the chain
-debug - extra output
-nbio_test - more ssl protocol testing
-state - print the ’ssl’ states
-nbio - Run with non-blocking IO