Certificate related commands (personal retention)

Openssl genrsa-des3-out ca1.key 2048 generate user key

Openssl rsa-in ca1.key-out ca1.key remove key's password

Openssl req-new-key ca1.key-out ca1.csr-config openssl.cnf generates csr file

Openssl ca-in user1.csr-out user1.crt-cert ca0.crt-keyfile ca0.key-config openssl.cnf signature csr file

Openssl req-new-x509-keyout ca1_0.key-out ca1_0.crt-config openssl.cnf self-generated root certificate

Openssl ca-revoke ca1_1.crt

Openssl ca-gencrl-out ca1_1crl

Openssl pkcs12-in root.pfx-nodes-out root.pem # generates all the contents in plaintext

Openssl rsa-in root.pem-out root.key # fetch key file

Openssl x509-in root.pem-out root.crt # take the certificate

Openssl pkcs12-export-inkey root.key-in root.crt-out root.pfx # synthetic pfx format

.cer / .crt is used to store certificates, which are stored in binary form without a private key.

The difference between .pem and crt/cer is that it is represented as Ascii.

Pfx/p12 is used to store personal certificates / private keys. It usually contains protection passwords in binary mode.

P10 is a certificate request

P7r is CA's reply to the certificate request and is only used for import

P7b shows the certificate chain (certificate chain) in a tree, and also supports a single certificate without a private key.

BasicConstraints=critical,CA:TRUE, pathlen:20

Mount-t cifs-o username=administrator / / 192.168.0.11/share / mnt