Check key length from the command line with OpenSSL | To check the key length of a certificate, use the openssl command. Here is how to check an RSA private key length: $ openssl rsa -text -noout -in private.key The top of the output will have: Private-Key: (1024 bit) For a certificates (.crt or .pem), use this command: $ openssl x509 -text -noout -in certificate.crt
How to Check for SSL Renegotiation
How to Check for SSL Renegotiation | To check if a server allows SSL Renegotiation, you can use the openssl command. I’ll show you how! The commands are as follows: $ openssl s_client -connect yourdomain.com:443 Then after the regular ssl cert info displays, enter the following: GET / HTTP/1.0 R If the server allows renegotiation, it will then have something similar to
Create self-signed SSL certificate for Virtual Host
Create self-signed SSL certificate for Virtual Host | In Debian or Ubuntu, it is easy to generate a self-signed certificate for your virtual host. Here is how it works! 1. First, install the package ssl-cert: $ sudo apt-get install ssl-cert Since godaddy and the like are making 2048 bit certs common these days, optionally edit the file /usr/share/ssl-cert/ssleay.cnf and change 1024 bit 2048
