48 lines
2.6 KiB
Bash
48 lines
2.6 KiB
Bash
#!/bin/sh
|
|
|
|
set -e
|
|
set -x
|
|
|
|
openssl version | tee openssl_version.txt
|
|
|
|
# Private key
|
|
openssl ecparam -name prime256v1 -genkey -noout -conv_form uncompressed -out ecc_p256_private.pem
|
|
openssl ec -in ecc_p256_private.pem -outform DER -out ecc_p256_private.der
|
|
openssl pkcs8 -in ecc_p256_private.der -inform DER -out ecc_p256_private_p8_clear.der -outform DER -nocrypt -topk8
|
|
openssl pkcs8 -in ecc_p256_private.der -inform DER -out ecc_p256_private_p8_clear.pem -outform PEM -nocrypt -topk8
|
|
openssl ec -in ecc_p256_private.pem -text -out ecc_p256.txt
|
|
|
|
# Encrypted private key
|
|
openssl pkcs8 -in ecc_p256_private.der -inform DER -passout 'pass:secret' -out ecc_p256_private_p8.der -outform DER -topk8
|
|
openssl pkcs8 -in ecc_p256_private.der -inform DER -passout 'pass:secret' -out ecc_p256_private_p8.pem -outform PEM -topk8
|
|
openssl ec -in ecc_p256_private.pem -des3 -out ecc_p256_private_enc_des3.pem -passout 'pass:secret' -outform PEM
|
|
openssl ec -in ecc_p256_private.pem -aes128 -out ecc_p256_private_enc_aes128.pem -passout 'pass:secret' -outform PEM
|
|
openssl ec -in ecc_p256_private.pem -aes192 -out ecc_p256_private_enc_aes192.pem -passout 'pass:secret' -outform PEM
|
|
openssl ec -in ecc_p256_private.pem -aes256 -out ecc_p256_private_enc_aes256.pem -passout 'pass:secret' -outform PEM
|
|
openssl ec -in ecc_p256_private.pem -aes-256-gcm -out ecc_p256_private_enc_aes256_gcm.pem -passout 'pass:secret' -outform PEM
|
|
|
|
# Public key
|
|
openssl ec -in ecc_p256_private.pem -pubout -out ecc_p256_public.pem
|
|
openssl ec -pubin -in ecc_p256_public.pem -outform DER -out ecc_p256_public.der
|
|
openssl ec -pubin -in ecc_p256_public.pem -outform DER -conv_form compressed -out ecc_p256_public_compressed.der
|
|
openssl ec -pubin -in ecc_p256_public.pem -outform PEM -conv_form compressed -out ecc_p256_public_compressed.pem
|
|
|
|
# X.509 cert
|
|
openssl req -new -key ecc_p256_private.pem -days 365 -x509 -out ecc_p256_x509.pem -subj '/C=GB/CN=example.com'
|
|
openssl x509 -in ecc_p256_x509.pem -out ecc_p256_x509.der -outform DER
|
|
|
|
# OpenSSH
|
|
chmod 600 ecc_p256_private.pem
|
|
ssh-keygen -f ecc_p256_private.pem -y > ecc_p256_public_openssh.txt
|
|
|
|
ssh-keygen -t ecdsa -b 256 -f ecc_p256_private_openssh.pem -P ""
|
|
cp -fa ecc_p256_private_openssh.pem ecc_p256_private_openssh_old.pem
|
|
ssh-keygen -p -f ecc_p256_private_openssh_old.pem -m PEM -N ""
|
|
|
|
ssh-keygen -t ecdsa -b 256 -f ecc_p256_private_openssh_pwd.pem -P "password"
|
|
cp -fa ecc_p256_private_openssh_pwd.pem ecc_p256_private_openssh_pwd_old.pem
|
|
ssh-keygen -p -f ecc_p256_private_openssh_pwd_old.pem -m PEM -N "" -P "password"
|
|
|
|
# Legacy OpenSSL format with ECPARAMs
|
|
openssl ecparam -name prime256v1 -genkey -out ecc_p256_private_ecparams.pem
|