9 B<openssl>
14 B<openssl> B<no->I<XXX> [ I<options> ]
16 B<openssl> B<-help> | B<-version>
24 The B<openssl> program is a command line program for using the various
25 cryptography functions of OpenSSL's B<crypto> library from the shell.
39 The B<openssl> program provides a rich variety of commands (I<command> in
48 The command B<no->I<XXX> tests whether a command of the
50 returns 0 (success) and prints B<no->I<XXX>; otherwise it returns 1
51 and prints I<XXX>.  In both cases, the output goes to B<stdout> and
52 nothing is printed to B<stderr>.  Additional command line arguments
55 availability of ciphers in the B<openssl> program.  (B<no->I<XXX> is
56 not able to detect pseudo-commands such as B<quit>,
57 B<list>, or B<no->I<XXX> itself.)
62 arguments and have a B<-config> option to specify that file.
65 command using the B<-d> or B<-a> option.
66 The environment variable B<OPENSSL_CONF> can be used to specify a different
77 =item B<asn1parse>
81 =item B<ca>
85 =item B<ciphers>
89 =item B<cms>
93 =item B<crl>
97 =item B<crl2pkcs7>
101 =item B<dgst>
106 =item B<dhparam>
111 =item B<dsa>
115 =item B<dsaparam>
120 =item B<ec>
124 =item B<ecparam>
128 =item B<enc>
132 =item B<engine>
136 =item B<errstr>
140 =item B<fipsinstall>
144 =item B<gendsa>
149 =item B<genpkey>
153 =item B<genrsa>
157 =item B<help>
161 =item B<info>
165 =item B<kdf>
169 =item B<list>
173 =item B<mac>
177 =item B<nseq>
181 =item B<ocsp>
185 =item B<passwd>
189 =item B<pkcs12>
193 =item B<pkcs7>
197 =item B<pkcs8>
201 =item B<pkey>
205 =item B<pkeyparam>
209 =item B<pkeyutl>
213 =item B<prime>
217 =item B<rand>
221 =item B<rehash>
225 =item B<req>
229 =item B<rsa>
233 =item B<rsautl>
238 =item B<s_client>
243 internally uses mostly all functionality of the OpenSSL B<ssl> library.
245 =item B<s_server>
250 functionality of the OpenSSL B<ssl> library.  It provides both an own command
254 =item B<s_time>
258 =item B<sess_id>
262 =item B<smime>
266 =item B<speed>
270 =item B<spkac>
274 =item B<srp>
278 =item B<storeutl>
282 =item B<ts>
286 =item B<verify>
291 =item B<version>
295 =item B<x509>
305 =item B<blake2b512>
309 =item B<blake2s256>
313 =item B<md2>
317 =item B<md4>
321 =item B<md5>
325 =item B<mdc2>
329 =item B<rmd160>
333 =item B<sha1>
337 =item B<sha224>
341 =item B<sha256>
345 =item B<sha384>
349 =item B<sha512>
353 =item B<sha3-224>
357 =item B<sha3-256>
361 =item B<sha3-384>
365 =item B<sha3-512>
369 =item B<keccak-224>
373 =item B<keccak-256>
377 =item B<keccak-384>
381 =item B<keccak-512>
385 =item B<shake128>
389 =item B<shake256>
393 =item B<sm3>
409 =item B<aes128>, B<aes-128-cbc>, B<aes-128-cfb>, B<aes-128-ctr>, B<aes-128-ecb>, B<aes-128-ofb>
413 =item B<aes192>, B<aes-192-cbc>, B<aes-192-cfb>, B<aes-192-ctr>, B<aes-192-ecb>, B<aes-192-ofb>
417 =item B<aes256>, B<aes-256-cbc>, B<aes-256-cfb>, B<aes-256-ctr>, B<aes-256-ecb>, B<aes-256-ofb>
421 =item B<aria128>, B<aria-128-cbc>, B<aria-128-cfb>, B<aria-128-ctr>, B<aria-128-ecb>, B<aria-128-of…
425 =item B<aria192>, B<aria-192-cbc>, B<aria-192-cfb>, B<aria-192-ctr>, B<aria-192-ecb>, B<aria-192-of…
429 =item B<aria256>, B<aria-256-cbc>, B<aria-256-cfb>, B<aria-256-ctr>, B<aria-256-ecb>, B<aria-256-of…
433 =item B<base64>
437 =item B<bf>, B<bf-cbc>, B<bf-cfb>, B<bf-ecb>, B<bf-ofb>
441 =item B<camellia128>, B<camellia-128-cbc>, B<camellia-128-cfb>, B<camellia-128-ctr>, B<camellia-128…
445 =item B<camellia192>, B<camellia-192-cbc>, B<camellia-192-cfb>, B<camellia-192-ctr>, B<camellia-192…
449 =item B<camellia256>, B<camellia-256-cbc>, B<camellia-256-cfb>, B<camellia-256-ctr>, B<camellia-256…
453 =item B<cast>, B<cast-cbc>
457 =item B<cast5-cbc>, B<cast5-cfb>, B<cast5-ecb>, B<cast5-ofb>
461 =item B<chacha20>
465 =item B<des>, B<des-cbc>, B<des-cfb>, B<des-ecb>, B<des-ede>, B<des-ede-cbc>, B<des-ede-cfb>, B<des…
469 =item B<des3>, B<desx>, B<des-ede3>, B<des-ede3-cbc>, B<des-ede3-cfb>, B<des-ede3-ofb>
473 =item B<idea>, B<idea-cbc>, B<idea-cfb>, B<idea-ecb>, B<idea-ofb>
477 =item B<rc2>, B<rc2-cbc>, B<rc2-cfb>, B<rc2-ecb>, B<rc2-ofb>
481 =item B<rc4>
485 =item B<rc5>, B<rc5-cbc>, B<rc5-cfb>, B<rc5-ecb>, B<rc5-ofb>
489 =item B<seed>, B<seed-cbc>, B<seed-cfb>, B<seed-ecb>, B<seed-ofb>
493 =item B<sm4>, B<sm4-cbc>, B<sm4-cfb>, B<sm4-ctr>, B<sm4-ecb>, B<sm4-ofb>
511 =item B<-help>
514 For more detailed information, each command supports a B<-help> option.
515 Accepts B<--help> as well.
517 =item B<-version>
519 Provides a terse summary of the B<openssl> program version.
521 Accepts B<--version> as well.
529 =item B<-help>
533 =item B<-->
560 every use of B<-rand> should be paired with B<-writerand>.
564 =item B<-rand> I<files>
573 =item B<-writerand> I<file>
602 =item B<-ssl3>, B<-tls1>, B<-tls1_1>, B<-tls1_2>, B<-tls1_3>, B<-no_ssl3>, B<-no_tls1>, B<-no_tls1_…
608 the B<no_> options.
609 The B<no_*> options do not work with B<s_time> and B<ciphers> commands but work with
610 B<s_client> and B<s_server> commands.
612 =item B<-dtls>, B<-dtls1>, B<-dtls1_2>
615 With B<-dtls>, clients will negotiate any supported DTLS protocol version.
616 Use the B<-dtls1> or B<-dtls1_2> options to support only DTLS1.0 or DTLS1.2,
625 =item B<-engine> I<id>
632 The engine will be used for key ids specified with B<-key> and similar
633 options when an option like B<-keyform engine> is given.
643 Options specifying keys, like B<-key> and similar, can use the generic
669 =item B<-provider> I<name>
675 "MODULESDIR" path, B<OPENSSL_MODULES> environment variable, or the path
676 specified by B<-provider-path> is prepended to relative paths.
679 =item B<-provider-path> I<path>
682 Equivalently, the B<OPENSSL_MODULES> environment variable may be set.
684 =item B<-propquery> I<propq>
698 such as B<OPENSSL_CONF>, B<OPENSSL_MODULES>, and B<OPENSSL_TRACE>,
770 The B<list> -I<XXX>B<-algorithms> options were added in OpenSSL 1.0.0;
774 The B<-issuer_checks> option is deprecated as of OpenSSL 1.1.0 and
777 The B<-xcertform> and B<-xkeyform> options

Last Index update Fri Nov 22 14:03:13 UTC 2024

Dedicated to & Maintained by Room-11