OpenSSL Release Notes (5900-1560, August 2011)

This command creates a 3DES-encrypted 1024-bit key pair stored in the file key.txt. The
encryption is done using the pass phrase supplied by the user.
Viewing an RSA key pair
Following is the syntax to view an RSA key pair:
# openssl rsa -in <filename> -noout -text
For example: # openssl genrsa -des3 -out key.pem 1024.
This command displays the modulus, exponent, and prime key values of the key pair stored in the
key.pem file. If the key pair stored in key.pem is encrypted, then this commands prompts the
user for the pass phrase.
Creating an RSA certificate request
Following is the syntax to create a new certificate request:
# openssl req -new -nodes -out <filename> -keyout <keyfile>
-subj <subject>
Where:
<filename> specifies the file to which the certificate request is written.
<keyfile> specifies the file to which the RSA public and private key pair for the certificate
is written
<subject> specifies the subject name of the certificate.
For example: # openssl req -new -nodes -out cert.txt -keyout key.pem -subj
"/C=US/ST=CA/L=CITY/CN=localhost/emailAddress=root@localhost".
This command creates an RSA certificate request.
Creating a self-signed certificate
Following is the syntax to create a self-signed certificate:
# openssl req -new -nodes -x509 -out <filename> -keyout <keyfile>
-days <numdays> -subj <subject>
Where:
-x509 indicates a self-signed certificate.
numdays indicates the number of days for which the certificate is valid.
For example: # openssl req -new -nodes -x509 -out cert.pem -keyout key.pem
-days 365 -subj
"/C=US/ST=CA/L=City/CN=localhost/emailAddress=root@localhost".
This command creates an self-signed certificate.
OpenSSL resources
This section provides a list of sources from which you can obtain the OpenSSL software, and
pointers to obtain information about OpenSSL technology.
Getting the OpenSSL software
You can obtain OpenSSL A.00.09.08q software from the following sources:
• HP Software Depot at: http://www.software.hp.com
• HP-UX Operating Environments (OEs)
OpenSSL resources 19