SSL Certificates

Create private authority

openssl genrsa -out XXX-key.pem 4096
openssl req -new -key XXX-key.pem -out XXX.csr

File XXX-key.pem begins with this line:

-----BEGIN RSA PRIVATE KEY-----

File XXX.csr begins with this line:

-----BEGIN CERTIFICATE REQUEST-----

Create certificate signed by private authority

Certificate would be valid for 4 years.

openssl x509 -days 1461 -req -in XXX.csr -signkey XXX-key.pem -out XXX.pem

View certificate information

openssl x509 -in XXX.pem -noout -text

Performance testing

openssl speed -evp Algorithms

For example:

openssl speed -evp aes-256-cbc md5

Links

• Credits
• Credits @serverfault