asn1parse, ca, ciphers, cms, crl, crl2pkcs7, dgst, dhparam, dsa, dsaparam, ec, ecparam, enc, engine, errstr, gendsa, genpkey, genrsa, info, kdf, mac, nseq, ocsp, passwd, pkcs12, pkcs7, pkcs8, pkey, pkeyparam, pkeyutl, prime, rand, rehash, req, rsa, rsautl, s_client, s_server, s_time, sess_id, smime, speed, spkac, srp, storeutl, ts, verify, version, x509 - OpenSSL application commands
| Use Case | Command | Description |
|---|---|---|
| đ Generate a self-signed certificate | openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365 | Create a self-signed X.509 certificate and RSA key |
| đ Generate a certificate signing request (CSR) | openssl req -new -key key.pem -out csr.pem | Create a CSR for submission to a CA |
| đ Encrypt a file | openssl enc -aes-256-cbc -salt -in plain.txt -out encrypted.enc | Symmetric encryption of a file |
| đ Decrypt a file | openssl enc -d -aes-256-cbc -in encrypted.enc -out plain.txt | Symmetric decryption of a file |
| đ Generate an RSA private key | openssl genrsa -out key.pem 2048 | Generate a new RSA private key |
| đ Generate an EC private key | openssl ecparam -genkey -name prime256v1 -out key.pem | Generate an Elliptic Curve private key |
| đ Verify a certificate signature | openssl verify -CAfile ca.pem cert.pem | Verify a certificate against a CA trust store |
| đ Compute a message digest | openssl dgst -sha256 -out digest.txt file.txt | Compute SHA-256 hash of a file |
| đ Test TLS connection | openssl s_client -connect example.com:443 | Connect to a TLS server for debugging |
| đ View certificate details | openssl x509 -in cert.pem -text -noout | Display the contents of a certificate in human-readable form |
openssl cmd -help | [-option | -option arg] ... [arg] ...
Every cmd listed above is a (sub-)command of the openssl(1) application. It has its own detailed manual page at openssl-cmd(1). For example, to view the manual page for the openssl dgst command, type "man openssl-dgst".
Among others, every subcommand has a help option.
-help â Print out a usage message for the subcommand.
openssl(1), openssl-asn1parse(1), openssl-ca(1), openssl-ciphers(1), openssl-cms(1), openssl-crl(1), openssl-crl2pkcs7(1), openssl-dgst(1), openssl-dhparam(1), openssl-dsa(1), openssl-dsaparam(1), openssl-ec(1), openssl-ecparam(1), openssl-enc(1), openssl-engine(1), openssl-errstr(1), openssl-gendsa(1), openssl-genpkey(1), openssl-genrsa(1), openssl-info(1), openssl-kdf(1), openssl-mac(1), openssl-nseq(1), openssl-ocsp(1), openssl-passwd(1), openssl-pkcs12(1), openssl-pkcs7(1), openssl-pkcs8(1), openssl-pkey(1), openssl-pkeyparam(1), openssl-pkeyutl(1), openssl-prime(1), openssl-rand(1), openssl-rehash(1), openssl-req(1), openssl-rsa(1), openssl-rsautl(1), openssl-s_client(1), openssl-s_server(1), openssl-s_time(1), openssl-sess_id(1), openssl-smime(1), openssl-speed(1), openssl-spkac(1), openssl-srp(1), openssl-storeutl(1), openssl-ts(1), openssl-verify(1), openssl-version(1), openssl-x509(1).
Initially, the manual page entry for the "openssl cmd" command used to be available at cmd(1). Later, the alias openssl-cmd(1) was introduced, which made it easier to group the openssl commands using the apropos(1) command or the shell's tab completion.
In order to reduce cluttering of the global manual page namespace, the manual page entries without the 'openssl-' prefix have been deprecated in OpenSSL 3.0 and will be removed in OpenSSL 4.0.
Copyright 2019-2020 The OpenSSL Project Authors. All Rights Reserved.
Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <https://www.openssl.org/source/license.html>.
Generated by phpman v4.10.0-7-g98e9fd5 · Markdown · JSON · MCP Author: Che Dong Under GNU General Public License
2026-09-03 16:29 @216.73.216.51
CrawledBy Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)