Archive for May, 2009

View x509 certificate details

OpenSSL is quite a complex application, however it is quite easy to get it to show you details or a given x509 SSL certificate using this command:


$ openssl x509 -in filename.crt -noout -text

Where filename corresponds to the X.509 certificate file, which typically would end in .crt, .cert or .pem.

Related posts:

  1. SSL: Verifying that a Certificate matches a Private Key
  2. View The Contents Of A Certificate Signing Request (CSR)
  3. Howto Create Generate a Certificate Signing Request
  4. Openssl to create an unencrypted key from an encrypted one (Remove password)
  5. Howto: Convert an OpenSSL key to a public/private OpenSSH key-pair
  6. OpenSSL CSR Wizard
  7. SSL Certificates Review: What to Buy
  8. dos2unix on Ubuntu and Debian
  9. Run Single Commands on a SSH-based Server
  10. Bash shortcuts tips and tricks

Comments

SSL: Verifying that a Certificate matches a Private Key

The private key contains a series of numbers. Two of those numbers form the “public key”, the others are part of your “private key”. The “public key” bits are also embedded in your Certificate (we get them from your CSR). To check that the public key in your cert matches the public portion of your private key, you need to view the cert and the key and compare the numbers.

Normally it requires some manual number matching to match a given private key with a given certificate, however with this command you are able to do a comparison automatic:


$ (openssl x509 -noout -modulus -in server.pem | openssl md5 ;\
openssl rsa -noout -modulus -in server.key | openssl md5) | uniq

(If more than one hash is displayed, they don’t match)

No related posts.

Comments

Howto: Workaround censorship in relation to thepiratebay.org

To get around the censorship you can to change the name server settings on your computer or router. Here are some different ways to do it.

Option 1: Use OpenDNS
OpenDNS is a project that helps you to avoid the censorship in an easy way. On their website you can find information about how to configure your computer, regardless of which operating system you use. They also have guides for a large amount of routers.

Option 2: Guide for Mac OS X
(the official OS X Leopard guide from OpenDNS)

1. Go to System Preferences
2. Click on Network
3. Select Built In Ethernet and click Advanced
4. Select the DNS tab and add 208.67.222.222 and 208.67.220.220 to the list of DNS servers. Click OK

Option 4: Guide for Windows XP”
1. Select Control Panel from the Start menu.
2. Click Network Connections from the Control Panel choices.
3. Choose your connection from the Network Connections window.
4. Click Properties button.
5. Select Internet Protocol (TCP/IP) and click Properties.
6. Click the radio button Use the following DNS server addresses and type in OpenDNS addresses in the Preferred DNS server and Alternate DNS server fields.

Option 4: Guide for Windows Vista”
1. Click the Start Orb, then select Control Panel.
2. Click on View network status and tasks.
3. Click on View status.
4. Click the Properties button.
5. Vista may ask for your permission to make changes. If so, click the Continue button.
6. Select Internet Protocol Version 4 (TCP/IPv4), then click the Properties button.
7. Click the radio button Use the following DNS server addresses: and type in OpenDNS addresses in the Preferred DNS server and Alternate DNS server fields.
8. Click the OK button, then the Close button, and the Close button again. Close the Network and Sharing Center window.

Related posts:

  1. Xen Howto: Install Windows
  2. Howto Install Windows XP / Vista on Xen
  3. Howto crack (or hack) a wireless network with Wired Equivalent Privacy (WEP)
  4. Howto: Office 2007 on Linux with Wine
  5. Upgrading to Ubuntu 9.04
  6. Jailbreak iPhone 3GS Using redsn0w (Windows)
  7. Windows 7 Tricks
  8. Howto: How to Reset the MySQL Root Password
  9. TCP Resource Exhaustion Denial of Service (DoS) Attack
  10. Crack Cisco VPN (hack)

Comments (2)