Tomas Lipensky - vedomostni koutek

Trace:

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision 		Previous revision
sw:security [2024/02/22 10:16]
tomas [Prace s openssl] 		sw:security [2024/04/30 08:38] (current)
tomas [Prace s openssl]
Line 59: Line 59:
 ''echo n | openssl s_client -showcerts -connect www.domain.com:443 | openssl x509 -text'' ... ukaze vsechny zaznamy o certifikatu, vcetne expirace\\ ''echo n | openssl s_client -showcerts -connect www.domain.com:443 | openssl x509 -text'' ... ukaze vsechny zaznamy o certifikatu, vcetne expirace\\
  
 +''openssl genrsa -out server.key 2048'' ... vytvoření privátního klíče\\ 
 ''openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt'' ... generovani self-signed verejneho klice pro https komunikaci\\ ''openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt'' ... generovani self-signed verejneho klice pro https komunikaci\\
-openssl req -text -noout -verify -in CSR.csr ... informace o CSR\\+''openssl req -new -key domena.key -out domena.csr -sha256 -subj "/C=CZ/L=Brno/O=Firma a.s./OU=tym/emailAddress=email@email.cz/CN=domena.cz" -addext "subjectAltName = DNS:domena1.cz,DNS:domena2"'' ... CSR s Alternate names\\ 
 +''openssl req -text -noout -verify -in CSR.csr'' ... informace o CSR\\
 ''openssl x509 -in lipensky.cz.pem -text -noout'' ... informace o klici acs.qacafe.com.pem v textove podobe\\ ''openssl x509 -in lipensky.cz.pem -text -noout'' ... informace o klici acs.qacafe.com.pem v textove podobe\\
 ''openssl x509 -in root_ca.cer -inform DER -out root_ca.pem'' ... konverze z DER formatu do PEM\\ ''openssl x509 -in root_ca.cer -inform DER -out root_ca.pem'' ... konverze z DER formatu do PEM\\
Line 110: Line 112:
 ====ssh==== ====ssh====
 ssh-keygen -f id_rsa -p ... zmena passphrase\\ ssh-keygen -f id_rsa -p ... zmena passphrase\\
 +
 +====gpg====
 +gpg -k ... seznam klíčů\\
 +gpg --output public.pgp --armor --export username@email ... exportovaní veřejného klíče\\
 +gpg --output private.pgp --armor --export-secret-key username@email ... exportování soukromého klíče\\
 +gpg --import my-key.asc ... import klíče\\
 +cat soubor | gpg --decrypt ... rozkódování\\
 +
Last modified: 2024/02/22 10:16
GNU Free Documentation License 1.3 Except where otherwise noted, content on this wiki is licensed under the following license: GNU Free Documentation License 1.3