Repos-que-me-gustan/the-book-of-secret-knowledge-copy
1
0
Fork 0
Code Pull Requests Activity

updated openssl (with curves + ec) one-liners

Browse Source 
- signed-off-by: trimstray <trimstray@gmail.com>
This commit is contained in:
trimstray 2019-02-07 20:09:04 +01:00
parent 622333d00f
commit 2f368288e1
1 changed files with 15 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
README.md
View File

@ -1611,12 +1611,22 @@ EOF
)) ))
``` ```
###### List available EC curves
```bash
openssl ecparam -list_curves
```
###### Generate ECDSA private key ###### Generate ECDSA private key
```bash ```bash
# _curve: X25519, prime256v1, secp521r1, secp384r1 # _curve: prime256v1, secp521r1, secp384r1
( _fd="private.key" ; _curve="prime256v1" ; \ ( _fd="private.key" ; _curve="prime256v1" ; \
openssl ecparam -out ${_fd} -name ${_curve} -genkey ) openssl ecparam -out ${_fd} -name ${_curve} -genkey )
# _curve: X25519
( _fd="private.key" ; _curve="x25519" ; \
openssl genpkey -algorithm ${_curve} -out ${_fd} )
``` ```
###### Print ECDSA private and public keys ###### Print ECDSA private and public keys
@ -1624,17 +1634,16 @@ openssl ecparam -out ${_fd} -name ${_curve} -genkey )
```bash ```bash
( _fd="private.key" ; \ ( _fd="private.key" ; \
openssl ec -in ${_fd} -noout -text ) openssl ec -in ${_fd} -noout -text )
```
###### List available EC curves # For x25519 only extracting public key
( _fd="private.key" ; _fd_pub="public.key" ; \
```bash openssl pkey -in ${_fd} -pubout -out ${_fd_pub} )
openssl ecparam -list_curves
``` ```
###### Generate private key with csr (ECC) ###### Generate private key with csr (ECC)
```bash ```bash
# _curve: prime256v1, secp521r1, secp384r1
( _fd="domain.com.key" ; _fd_csr="domain.com.csr" ; _curve="prime256v1" ; openssl ecparam -out ${_fd} -name ${_curve} -genkey ; openssl req -new -key ${_fd} -out ${_fd_csr} -sha256 ) ( _fd="domain.com.key" ; _fd_csr="domain.com.csr" ; _curve="prime256v1" ; openssl ecparam -out ${_fd} -name ${_curve} -genkey ; openssl req -new -key ${_fd} -out ${_fd_csr} -sha256 )
``` ```