OpenSSL Cookbook

Description

https://www.feistyduck.com/books/openssl-cookbook/ OpenSSL Cookbook Table of Contents Preface Feedback Acknowledgments About Bulletproof TLS and PKI About the Author Chapter 1: OpenSSL Command Line Getting Started Determine OpenSSL Version and Configuration Building OpenSSL Examine Available Commands Building a Trust Store Manual Conversion Key and Certificate Management Key Generation Creating Certificate Signing Requests Creating CSRs from Existing Certificates Unattended CSR Generation Signing Your Own Certificates Creating Certificates Valid for Multiple Hostnames Examining Certificates Examining Public Certificates Key and Certificate Conversion PEM and DER Conversion PKCS #12 (PFX) Conversion PKCS #7 Conversion Configuration Obtaining Supported Suites Understanding Security Levels Configuring TLS 1.3 Configuring OpenSSL Defaults Recommended Suite Configuration Generating DH Parameters Legacy Suite Configuration Keywords Combining Keywords Building Cipher Suite Lists Keyword Modifiers Sorting Handling Errors Performance Creating a Private Certification Authority Features and Limitations Creating a Root CA Root CA Configuration Root CA Directory Structure Root CA Generation Structure of the Database File Root CA Operations Create a Certificate for OCSP Signing Creating a Subordinate CA Subordinate CA Configuration Subordinate CA Generation Subordinate CA Operations Chapter 2: Testing TLS with OpenSSL Custom-Compile OpenSSL for Testing Connecting to TLS Services Certificate Verification Testing Protocols That Upgrade to TLS Extracting Remote Certificates Testing Protocol Support Testing Cipher Suite Configuration Testing Cipher Suite Preference Testing Named Groups Testing DANE Testing Session Resumption Keeping Session State across Connections Checking OCSP Revocation Testing OCSP Stapling Checking CRL Revocation Testing Renegotiation Testing for Heartbleed Determining the Strength of Diffie-Hellman Parameters