Différences

Ci-dessous, les différences entre deux révisions de la page.

--- informatique:openssl [24/03/2021 21:48] – [Chiffrer des fichiers en asymétrique (clé privée/publique)] cyrille
+++ informatique:openssl [17/08/2021 15:43] (Version actuelle) – [CSR generation] cyrille
@@ Ligne 51: / Ligne 51: @@
   openssl req -nodes -newkey rsa:2048 -keyout monserveur.key -out serveur.csr
 </code>
+===== Create Certificate Authority =====
+https://www.golinuxcloud.com/create-certificate-authority-root-ca-linux/#Step_4_Create_Certificate_Authority_Certificate
 ===== Decode =====
@@ Ligne 79: / Ligne 84: @@
 <code bash>
+# blowfish may be faster in code implementation,
+# but recent cpu embed hard coded aes which should be faster ;-)
+#ALGO=-blowfish
+ALGO=-aes256
 # Create a random secret:
 #  - secret size must be compatible with RSA
@@ Ligne 85: / Ligne 95: @@
 #    because only first line will be used.
 SECRET=`openssl rand -hex 64`
-# blowfish may be faster in code implementation,
-# but recent cpu embed hard coded aes which should be faster ;-)
-#ALGO=-blowfish
-ALGO=-aes256
 # encrypt the secret:
@@ Ligne 107: / Ligne 112: @@
 Sources:
+  * https://wiki.openssl.org/index.php/Enc
+  * https://unix.stackexchange.com/questions/507131/openssl-1-1-1b-warning-using-iter-or-pbkdf2-would-be-better-while-decrypting
   * https://www.devco.net/archives/2006/02/13/public_-_private_key_encryption_using_openssl.php
   * https://linuxconfig.org/using-openssl-to-encrypt-messages-and-files-on-linux
   * https://raymii.org/s/tutorials/Encrypt_and_decrypt_files_to_public_keys_via_the_OpenSSL_Command_Line.html