version 1.59, 2016/08/23 18:54:04 |
version 1.60, 2016/08/24 08:07:33 |
|
|
.It Fl passout Ar arg |
.It Fl passout Ar arg |
The output file password source. |
The output file password source. |
.It Fl pubin |
.It Fl pubin |
By default, a private key is read from the input file. |
Read in a public key, not a private key. |
With this option a public key is read instead. |
|
.It Fl pubout |
.It Fl pubout |
By default, a private key is output. |
Output a public key, not a private key. |
With this option a public key will be output instead. |
Automatically set if the input is a public key. |
This option is automatically set if the input is a public key. |
|
.It Fl text |
.It Fl text |
Print the public/private key components and parameters. |
Print the public/private key components and parameters. |
.El |
.El |
|
|
.It Fl passout Ar arg |
.It Fl passout Ar arg |
The output file password source. |
The output file password source. |
.It Fl pubin |
.It Fl pubin |
By default a private key is read from the input file; |
Read in a public key, not a private key. |
with this option a public key is read instead. |
|
.It Fl pubout |
.It Fl pubout |
By default a private key is output; |
Output a public key, not a private key. |
with this option a public key is output instead. |
Automatically set if the input is a public key. |
This option is automatically set if the input is a public key. |
|
.It Fl text |
.It Fl text |
Print the public/private key components and parameters. |
Print the public/private key components and parameters. |
.El |
.El |
|
|
.It Fl passout Ar arg |
.It Fl passout Ar arg |
The output file password source. |
The output file password source. |
.El |
.El |
.\" |
|
.\" PKEY |
|
.\" |
|
.Sh PKEY |
.Sh PKEY |
.nr nS 1 |
.nr nS 1 |
.Nm "openssl pkey" |
.Nm "openssl pkey" |
.Bk -words |
|
.Op Ar cipher |
.Op Ar cipher |
.Op Fl in Ar file |
.Op Fl in Ar file |
.Op Fl inform Ar DER | PEM |
.Op Fl inform Cm der | pem |
.Op Fl noout |
.Op Fl noout |
.Op Fl out Ar file |
.Op Fl out Ar file |
.Op Fl outform Ar DER | PEM |
.Op Fl outform Cm der | pem |
.Op Fl passin Ar arg |
.Op Fl passin Ar arg |
.Op Fl passout Ar arg |
.Op Fl passout Ar arg |
.Op Fl pubin |
.Op Fl pubin |
.Op Fl pubout |
.Op Fl pubout |
.Op Fl text |
.Op Fl text |
.Op Fl text_pub |
.Op Fl text_pub |
.Ek |
|
.nr nS 0 |
.nr nS 0 |
.Pp |
.Pp |
The |
The |
|
|
The options are as follows: |
The options are as follows: |
.Bl -tag -width Ds |
.Bl -tag -width Ds |
.It Ar cipher |
.It Ar cipher |
These options encrypt the private key with the supplied cipher. |
Encrypt the private key with the specified cipher. |
Any algorithm name accepted by |
Any algorithm name accepted by |
.Fn EVP_get_cipherbyname |
.Xr EVP_get_cipherbyname 3 |
is acceptable, such as |
is acceptable, such as |
.Cm des3 . |
.Cm des3 . |
.It Fl in Ar file |
.It Fl in Ar file |
This specifies the input filename to read a key from, |
The input file to read from, |
or standard input if this option is not specified. |
or standard input if not specified. |
If the key is encrypted a pass phrase will be prompted for. |
If the key is encrypted a pass phrase will be prompted for. |
.It Fl inform Ar DER | PEM |
.It Fl inform Cm der | pem |
This specifies the input format, DER or PEM. |
The input format. |
.It Fl noout |
.It Fl noout |
Do not output the encoded version of the key. |
Do not output the encoded version of the key. |
.It Fl out Ar file |
.It Fl out Ar file |
This specifies the output filename to write a key to, |
The output file to write to, |
or standard output if this option is not specified. |
or standard output if not specified. |
If any encryption options are set then a pass phrase |
If any encryption options are set then a pass phrase |
will be prompted for. |
will be prompted for. |
The output filename should |
.It Fl outform Cm der | pem |
.Em not |
The output format. |
be the same as the input filename. |
|
.It Fl outform Ar DER | PEM |
|
This specifies the output format; |
|
the options have the same meaning as the |
|
.Fl inform |
|
option. |
|
.It Fl passin Ar arg |
.It Fl passin Ar arg |
The key password source. |
The key password source. |
.It Fl passout Ar arg |
.It Fl passout Ar arg |
The output file password source. |
The output file password source. |
.It Fl pubin |
.It Fl pubin |
By default a private key is read from the input file: |
Read in a public key, not a private key. |
with this option a public key is read instead. |
|
.It Fl pubout |
.It Fl pubout |
By default a private key is output: |
Output a public key, not a private key. |
with this option a public key will be output instead. |
Automatically set if the input is a public key. |
This option is automatically set if |
|
the input is a public key. |
|
.It Fl text |
.It Fl text |
Print out the various public or private key components in |
Print out the various public or private key components in plain text |
plain text in addition to the encoded version. |
in addition to the encoded version. |
.It Fl text_pub |
.It Fl text_pub |
Print out only public key components |
Print out only public key components |
even if a private key is being processed. |
even if a private key is being processed. |
.El |
.El |
.Sh PKEY EXAMPLES |
|
To remove the pass phrase on an RSA private key: |
|
.Bd -literal -offset indent |
|
$ openssl pkey -in key.pem -out keyout.pem |
|
.Ed |
|
.Pp |
|
To encrypt a private key using triple DES: |
|
.Bd -literal -offset indent |
|
$ openssl pkey -in key.pem -des3 -out keyout.pem |
|
.Ed |
|
.Pp |
|
To convert a private key from PEM to DER format: |
|
.Bd -literal -offset indent |
|
$ openssl pkey -in key.pem -outform DER -out keyout.der |
|
.Ed |
|
.Pp |
|
To print the components of a private key to standard output: |
|
.Bd -literal -offset indent |
|
$ openssl pkey -in key.pem -text -noout |
|
.Ed |
|
.Pp |
|
To print the public components of a private key to standard output: |
|
.Bd -literal -offset indent |
|
$ openssl pkey -in key.pem -text_pub -noout |
|
.Ed |
|
.Pp |
|
To just output the public part of a private key: |
|
.Bd -literal -offset indent |
|
$ openssl pkey -in key.pem -pubout -out pubkey.pem |
|
.Ed |
|
.\" |
.\" |
.\" PKEYPARAM |
.\" PKEYPARAM |
.\" |
.\" |