July 11, 2006

Little things about the OpenSSL command line...

I use OpenSSL often enough to appreciate it and care about the details, but not often enough to memorize the intricacies of the command line tools. Here's something I need often enough to remember it:

openssl ca -batch -notext -passin file:/openssl-pass.txt -config ./openssl.cnf -infiles ~/Desktop/XXXX-csr.pem 1> XXXX-cert.pem 2> XXXX-cert.err
  1. batch to suppress prompts about saving cert
  2. passin to avoid password prompt for CA private key
    1. pass:XXXXXX to put password right on the commandline
    2. file:XXXXXX to get password from a file
Posted by cbrown at July 11, 2006 4:05 PM