openssl工具使用简介

openssl工具使用简介1.私有密钥生成方法生成私有密钥,可以使用不同的数字签名算法.下面分别介绍;#采用DSA算法$openssldsaparam-noout-outdsakey0.pem-genkey1024#采用RSA算法$opensslgenrsa-outrsakey0.pem1024#采用RSA算法,并使用密码保护.在生成私钥时,需要输入一个密码,用于保护私钥.#在使用这个私钥进行加/解密操作时,也需要输入这个密码.$opensslgenrsa-des3-outrsakey1.pem10242.公用密钥的生成方法根据私钥来生成公钥#生成dsa算法的公钥$openssldsa-indsakey0.pem-pubout-outdsakey0-pub.pem#生成rsa算法的公钥$opensslrsa-inrsakey0.pem-pubout-outrsakey0-pub.pem3.自签名证书的生成方法#产生DSA算法的证书$opensslreq-x509-keydsakey0.pem-days365-outmycert-dsa.pem-new#产生RSA算法的证书$opensslreq-x509-keyrsakey0.pem-days365-outmycert-rsa.pem-new4.使用证书进行邮件加密我们的明文信件内容:$cattest.txt111111222222333333444444aaaaaa使用证书对明文信件进行加密,输出到etest.txt文件:$opensslsmime-encrypt-intest.txt-outetest.txtmycert-rsa.pem查看加密后的密文内容:$catetest.txtMIME-Version:1.0Content-Disposition:attachment;filename=smime.p7mContent-Type:application/x-pkcs7-mime;smime-type=enveloped-data;name=smime.p7mContent-Transfer-Encoding:base64MIIBYAYJKoZIhvcNAQcDoIIBUTCCAU0CAQAxgewwgekCAQAwUjBFMQswCQYDVQQGEwJBVTETMBEGA1UECBMKU29tZS1TdGF0ZTEhMB8GA1UEChMYSW50ZXJuZXQgV2lkZ2l0cyBQdHkgTHRkAgkAr71mh4NRX/UwDQYJKoZIhvcNAQEBBQAEgYCbrA1WBwQKZj7TcNtrxiDzqMBc/Lu063SLKvBK6mQMqT+npFOOFtzIKdFVkldH0YyQhMZDSCyqYUtGwOaDw6Jn0AHRt64UwPOKoaeL9RVqp9vgtiFC/uXis5UeyZCWS1z7Jsih8Aa+Da/DQN0sOCX85OdK/TDewNx8mTaYBbVf4jBZBgkqhkiG9w0BBwEwGgYIKoZIhvcNAwIwDgICAKAECNxsgiJ2s+1ugDC6JknPL+rDYBCddcyPH+bMYjqrUP0hE/GQ5WSjsv8CDkOUdvY5XG440yiAL3Z3ysI=使用私钥进行解密,输出到dtest.txt文件:$opensslsmime-decrypt-inetest.txt-inkeyrsakey0.pem-outdtest.txt查看解密后的信件内容,与原明文信件内容完全一致.$catdtest.txt111111222222333333444444aaaaaa