See for a great overview of frequent commands.

Create self signed cert

This creates an sha2 hash (sha1 is deprecated), nodes does not add password, 4096 bits should be good for the lifetime of the cert.

# openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem  -days 10000 -nodes -sha256

Online cipher code generator / SSL protocol generator

SSL Server Test

rb/ssl.txt · Last modified: 21/02/2020 12:48 by andrew