Command Line Utilities
When installed on your system openssl binary is entry point for many functions.
- launching openssl without any parameter will enter an interactive mode with an OpenSSL> prompt
- to quit: quit
- enter a command it will set a command context in which parameters depends on command.
- to known what commands and parameters you can issue for openssl do :
- openssl help
openssl:Error: 'help' is an invalid command. Standard commands asn1parse ca ciphers cms crl crl2pkcs7 dgst dh dhparam dsa dsaparam ec ecparam enc engine errstr gendh gendsa genpkey genrsa nseq ocsp passwd pkcs12 pkcs7 pkcs8 pkey pkeyparam pkeyutl prime rand req rsa rsautl s_client s_server s_time sess_id smime speed spkac srp ts verify version x509 Message Digest commands (see the `dgst' command for more details) md4 md5 rmd160 sha sha1 Cipher commands (see the `enc' command for more details) aes-128-cbc aes-128-ecb aes-192-cbc aes-192-ecb aes-256-cbc aes-256-ecb base64 bf bf-cbc bf-cfb bf-ecb bf-ofb camellia-128-cbc camellia-128-ecb camellia-192-cbc camellia-192-ecb camellia-256-cbc camellia-256-ecb cast cast-cbc cast5-cbc cast5-cfb cast5-ecb cast5-ofb des des-cbc des-cfb des-ecb des-ede des-ede-cbc des-ede-cfb des-ede-ofb des-ede3 des-ede3-cbc des-ede3-cfb des-ede3-ofb des-ofb des3 desx rc2 rc2-40-cbc rc2-64-cbc rc2-cbc rc2-cfb rc2-ecb rc2-ofb rc4 rc4-40 seed seed-cbc seed-cfb seed-ecb seed-ofb zlib
commands
Get information about your openssl toolkit
version
OpenSSL> version OpenSSL 1.0.1e 11 Feb 2013
ciphers
returns SSL/TLS ciphers supported.
OpenSSL> ciphers ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:SRP-DSS-AES-256-CBC-SHA:SRP-RSA-AES-256-CBC-SHA:DHE-DSS-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA256:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:ECDH-RSA-AES256-GCM-SHA384:ECDH-ECDSA-AES256-GCM-SHA384:ECDH-RSA-AES256-SHA384:ECDH-ECDSA-AES256-SHA384:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:AES256-GCM-SHA384:AES256-SHA256:AES256-SHA:CAMELLIA256-SHA:PSK-AES256-CBC-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:SRP-DSS-3DES-EDE-CBC-SHA:SRP-RSA-3DES-EDE-CBC-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA:PSK-3DES-EDE-CBC-SHA:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:SRP-DSS-AES-128-CBC-SHA:SRP-RSA-AES-128-CBC-SHA:DHE-DSS-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-SEED-SHA:DHE-DSS-SEED-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:ECDH-RSA-AES128-GCM-SHA256:ECDH-ECDSA-AES128-GCM-SHA256:ECDH-RSA-AES128-SHA256:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES128-SHA:ECDH-ECDSA-AES128-SHA:AES128-GCM-SHA256:AES128-SHA256:AES128-SHA:SEED-SHA:CAMELLIA128-SHA:PSK-AES128-CBC-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:RC4-SHA:RC4-MD5:PSK-RC4-SHA:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:EXP-RC4-MD5
engine
OpenSSL> engine (rsax) RSAX engine support (dynamic) Dynamic engine loading support
speed
returns informations of toolkit performance on cryptographic functions computations.
( Ex: on Linux 3.1.0-1-amd64 #1 SMP x86_64 GNU/Linux, HP dv7 i7 4Gb )
Doing md4 for 3s on 16 size blocks: 12430613 md4's in 3.00s ... Doing md5 for 3s on 16 size blocks: 8943943 md5's in 2.99s Doing md5 for 3s on 64 size blocks: 6560162 md5's in 3.00s Doing md5 for 3s on 256 size blocks: 3674563 md5's in 3.00s Doing md5 for 3s on 1024 size blocks: 1325803 md5's in 3.00s Doing md5 for 3s on 8192 size blocks: 190271 md5's in 3.00s Doing hmac(md5) for 3s on 16 size blocks: 7289025 hmac(md5)'s in 3.00s Doing hmac(md5) for 3s on 64 size blocks: 5519732 hmac(md5)'s in 3.00s Doing hmac(md5) for 3s on 256 size blocks: 3319123 hmac(md5)'s in 3.00s Doing hmac(md5) for 3s on 1024 size blocks: 1275475 hmac(md5)'s in 3.00s Doing hmac(md5) for 3s on 8192 size blocks: 187134 hmac(md5)'s in 3.00s Doing sha1 for 3s on 16 size blocks: 10089842 sha1's in 2.99s Doing sha1 for 3s on 64 size blocks: 7033355 sha1's in 3.00s Doing sha1 for 3s on 256 size blocks: 3919372 sha1's in 3.00s Doing sha1 for 3s on 1024 size blocks: 1374314 sha1's in 3.00s Doing sha1 for 3s on 8192 size blocks: 198808 sha1's in 3.00s Doing sha256 for 3s on 16 size blocks: 6462822 sha256's in 3.00s Doing sha256 for 3s on 64 size blocks: 3504641 sha256's in 3.00s Doing sha256 for 3s on 256 size blocks: 1486771 sha256's in 3.00s Doing sha256 for 3s on 1024 size blocks: 440613 sha256's in 3.00s Doing sha256 for 3s on 8192 size blocks: 58418 sha256's in 3.00s Doing sha512 for 3s on 16 size blocks: 5040453 sha512's in 2.99s Doing sha512 for 3s on 64 size blocks: 5089425 sha512's in 3.00s Doing sha512 for 3s on 256 size blocks: 1865240 sha512's in 3.00s Doing sha512 for 3s on 1024 size blocks: 643708 sha512's in 3.00s Doing sha512 for 3s on 8192 size blocks: 90615 sha512's in 3.00s ... Doing whirlpool for 3s on 8192 size blocks: 33204 whirlpool's in 3.00s ... Doing rmd160 for 3s on 8192 size blocks: 66719 rmd160's in 3.00s ... Doing rc4 for 3s on 8192 size blocks: 238972 rc4's in 3.00s ... Doing des cbc for 3s on 8192 size blocks: 19837 des cbc's in 3.00s ... Doing des ede3 for 3s on 8192 size blocks: 7706 des ede3's in 3.00s ... Doing aes-128 cbc for 3s on 8192 size blocks: 35217 aes-128 cbc's in 3.00s ... Doing aes-192 cbc for 3s on 8192 size blocks: 29225 aes-192 cbc's in 3.01s ... Doing aes-256 cbc for 3s on 8192 size blocks: 24414 aes-256 cbc's in 3.00s ... Doing aes-256 ige for 3s on 8192 size blocks: 23331 aes-256 ige's in 2.99s ...
