openssl req -x509 -newkey rsa:2048 -keyout selfsigned.key -out selfsigned.crt -days 365 -nodes -subj "/CN=localhost" Create a san.cnf file:
openssl crl2pkcs7 -nocrl -certfile certificate.crt -out certificate.p7b OpenSSL’s s_client is invaluable for debugging HTTPS, SMTP, IMAP, or custom TLS services.
[req] distinguished_name = req_distinguished_name req_extensions = v3_req prompt = no [req_distinguished_name] CN = myapp.local
openssl enc -aes-256-cbc -salt -in secret.txt -out secret.enc -k myStrongPassword
openssl s_client -connect internal.server:443 -cipher ECDHE-RSA-AES128-GCM-SHA256