openssl 명령어 모음
내용 명령어 기타
certification 내용 확인 > openssl x509 -in cert.pem -noout -text Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ...
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = Let's Encrypt, CN = R3
        Validity
발급된 cert파일과 private key가 같은지 확인  > openssl x509 -noout -modulus -in cert.pem | openssl md5

 > openssl rsa -noout -modulus -in privkey.pem | openssl md5
MD5(stdin)= 41dc41d6318ac4e5586bfa0ce8e1249b

MD5(stdin)= 41dc41d6318ac4e5586bfa0ce8e1249b
CA cert 확인 > openssl verify -CAfile isrgrootx1.pem RSA-chain.pem RSA-chain.pem: OK
ssl connectivity 확인 openssl s_client -verify_return_error -connect <domain>:<ssl port> CONNECTED(00000005)
depth=2 C = US, O = Internet Security Research Group, CN = ISRG Root X1
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = R3
verify return:1
depth=0 CN = <domain>
verify return:1
---
     
     
     
     
     
728x90
반응형