asn1parse, ca, ciphers, cms, crl, crl2pkcs7, dgst, dhparam, dsa, dsaparam, ec, ecparam, enc, engine, errstr, gendsa, genpkey, genrsa, info, kdf, mac, nseq, ocsp, passwd, pkcs12, pkcs7, pkcs8, pkey, pkeyparam, pkeyutl, prime, rand, rehash, req, rsa, rsautl, s_client, s_server, s_time, sess_id, smime, speed, spkac, srp, storeutl, ts, verify, version, x509 - OpenSSL application commands
| Use Case | Command | Description |
|---|---|---|
| ๐ Generate RSA key pair | openssl genrsa -out key.pem 2048 | Create a 2048-bit RSA private key |
| ๐ Create Certificate Signing Request | openssl req -new -key key.pem -out req.pem | Generate a CSR for a new certificate |
| ๐ View certificate details | openssl x509 -in cert.pem -text -noout | Display the content of a certificate |
| ๐ Hash data | openssl dgst -sha256 file.txt | Compute SHA-256 digest of a file |
| ๐งน Encrypt/decrypt file | openssl enc -aes-256-cbc -in plain.txt -out encrypted.enc | Symmetric encryption using AES-256 |
| ๐ Test TLS connection | openssl s_client -connect example.com:443 | Connect to a TLS server for debugging |
| ๐ฅ๏ธ Run TLS test server | openssl s_server -cert cert.pem -key key.pem | Start a test TLS server |
| ๐ฆ Convert PKCS#12 to PEM | openssl pkcs12 -in bundle.p12 -out bundle.pem -nodes | Extract private key and certificates from a PFX file |
| ๐ Verify certificate chain | openssl verify -CAfile ca.pem cert.pem | Check a certificate against a CA bundle |
| โก Benchmark performance | openssl speed -evp aes-256-gcm | Measure cryptographic algorithm speed |
openssl cmd -help | [-option | -option arg] ... [arg] ...
Every cmd listed above is a (sub-)command of the openssl(1) application. It has its own detailed manual page at openssl-cmd(1). For example, to view the manual page for the openssl dgst command, type "man openssl-dgst".
Among others, every subcommand has a help option.
Print out a usage message for the subcommand.
openssl(1), openssl-asn1parse(1), openssl-ca(1), openssl-ciphers(1), openssl-cms(1), openssl-crl(1), openssl-crl2pkcs7(1), openssl-dgst(1), openssl-dhparam(1), openssl-dsa(1), openssl-dsaparam(1), openssl-ec(1), openssl-ecparam(1), openssl-enc(1), openssl-engine(1), openssl-errstr(1), openssl-gendsa(1), openssl-genpkey(1), openssl-genrsa(1), openssl-info(1), openssl-kdf(1), openssl-mac(1), openssl-nseq(1), openssl-ocsp(1), openssl-passwd(1), openssl-pkcs12(1), openssl-pkcs7(1), openssl-pkcs8(1), openssl-pkey(1), openssl-pkeyparam(1), openssl-pkeyutl(1), openssl-prime(1), openssl-rand(1), openssl-rehash(1), openssl-req(1), openssl-rsa(1), openssl-rsautl(1), openssl-s_client(1), openssl-s_server(1), openssl-s_time(1), openssl-sess_id(1), openssl-smime(1), openssl-speed(1), openssl-spkac(1), openssl-srp(1), openssl-storeutl(1), openssl-ts(1), openssl-verify(1), openssl-version(1), openssl-x509(1),
Initially, the manual page entry for the "openssl cmd" command used to be available at cmd(1). Later, the alias openssl-cmd(1) was introduced, which made it easier to group the openssl commands using the apropos(1) command or the shell's tab completion.
In order to reduce cluttering of the global manual page namespace, the manual page entries without the 'openssl-' prefix have been deprecated in OpenSSL 3.0 and will be removed in OpenSSL 4.0.
Copyright 2019-2020 The OpenSSL Project Authors. All Rights Reserved.
Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <https://www.openssl.org/source/license.html>.
Generated by phpman v4.10.0-7-g98e9fd5 · Markdown · JSON · MCP Author: Che Dong Under GNU General Public License
2026-09-03 09:16 @216.73.216.239
CrawledBy Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)