Skip to content

Instantly share code, notes, and snippets.

@neonexus

neonexus/OpenSSL Commands.md

Last active May 17, 2016 14:24
Show Gist options
  • Star 9 You must be signed in to star a gist
  • Fork 4 You must be signed in to fork a gist
  • Save neonexus/10598151 to your computer and use it in GitHub Desktop.
Save neonexus/10598151 to your computer and use it in GitHub Desktop.
Download ZIP
AWS ELB OpenSSL commands list
Raw
OpenSSL Commands.md

Generate KEY and CSR:

openssl req -new -newkey rsa:2048 -nodes -keyout DOMAIN.key -out DOMAIN.csr

Echo the KEY in PEM format:

openssl rsa -in DOMAIN.key -outform PEM

Echo the CRT in PEM format:

openssl x509 -inform PEM -in DOMAIN.crt

Echo the CA CERTIFICATE CHAIN in PEM format:

(openssl x509 -inform PEM -in COMODORSADomainValidationSecureServerCA.crt; openssl x509 -inform PEM -in COMODORSAAddTrustCA.crt; openssl x509 -inform PEM -in AddTrustExternalCARoot.crt)

Echo the FULL CERTIFICATE CHAIN in PEM format:

(openssl x509 -inform PEM -in DOMAIN.crt; openssl x509 -inform PEM -in COMODORSADomainValidationSecureServerCA.crt; openssl x509 -inform PEM -in COMODORSAAddTrustCA.crt; openssl x509 -inform PEM -in AddTrustExternalCARoot.crt)
@lordgnu
Copy link

lordgnu commented Apr 16, 2014

For cheap NameCheap wildcard certs from Commodo

Echo the CERTIFICATE CHAIN in PEM format:

(openssl x509 -inform PEM -in COMODOHigh-AssuranceSecureServerCA.crt; openssl x509 -inform PEM -in AddTrustExternalCARoot.crt)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment