Cryptography toolkit — TLS testing, key/certificate generation, and data encoding.
medium risk
openssl is a comprehensive crypto toolkit. It generates RSA/EC keys, creates CSRs, signs certificates, tests TLS handshakes, encodes/decodes base64, and computes hashes. Essential for PKI management, HTTPS setup, and debugging TLS certificate issues.
openssl s_client -connect example.com:443 -servername example.comTest a TLS connection and inspect the full certificate chain for a remote host · explain & risk-check →openssl req -newkey rsa:4096 -keyout server.key -out server.csr -nodes -subj '/CN=example.com'Generate a 4096-bit RSA private key and certificate signing request in one step · explain & risk-check →openssl x509 -in cert.pem -noout -text | grep -A2 'Validity'Check expiry dates of a certificate from a PEM file · explain & risk-check →Check remote cert expiry without downloading a file: `echo | openssl s_client -connect host:443 2>/dev/null | openssl x509 -noout -dates`
Reference text is hand-written and may be incomplete — check man openssl for your version. Test destructive commands on a non-production system first.