linux command

---

####证书相关

openssl req -new -newkey rsa:2048 -nodes -out xxx.csr.pem -keyout xxx.private_key.pem //创建一个新的csr和私钥

openssl req -noout -text -in xxxx.csr.pem //查看csr

openssl req -in xxxx.csr.pem -noout -pubkey -out xxxx.public_key.pem //查看公钥

openssl x509 -req -days 360 -in xxxx.csr.pem -CA xxxx.ca.crt.pem -CAkey xxxx.ca.private_key.pem -CAcreateserial -out xxxx.crt.pem -sha256 //签名csr，生成证书

openssl x509 -text -noout -in xxxx.crt.pem //查看证书

openssl x509 -in xxxx.crt.pem -outform DER -out xxxx.crt.der //证书pem转化成der

openssl verify -CAfile root_ca.crt.pem inter_ca.crt.pem //验证证书

cat root_ca.crt.pem inter_ca.crt.pem > ca_chain.pem //验证证书链
openssl verify -CAfile ca_chain.pem test.crt.pem

---

openssl
gpg(open pgp)
pgp
gpg2

ssh配置公钥
ssh-copy-id username@xxx.xxx.xxx.xxx

grep -C xxx    上下文

openssl s_client -showcerts -connect xxx.xwbank.com:443 </dev/null 2>/dev/null|openssl x509 -outform PEM >xwbankvpn.pem