Inicio Explorar Axuda
Iniciar sesión
dream
/
Android_verify
1
1
Fork 0
Ficheiros Incidencias 0 Pull Requests 0 Wiki
Árbore: 02bb4a76f0
Ramas Etiquetas
Android_verify
/
third_party
/
android-libs
/
share
/
doc
/
openssl
/
html
/
man1
/
openssl-pkey.html

openssl-pkey.html 9.4 KB
Histórico Raw

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254 
  1. <?xml version="1.0" ?>
    2. 

  2. <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
    3. 

  3. <html xmlns="http://www.w3.org/1999/xhtml">
    4. 

  4. <head>
    5. 

  5. <title>openssl-pkey</title>
    6. 

  6. <meta http-equiv="content-type" content="text/html; charset=utf-8" />
    7. 

  7. <link rev="made" href="mailto:root@localhost" />
    8. 

  8. </head>
    9. 

  9. 

  10. <body>
    11. 

  11. 

  12. 

  13. 

  14. <ul id="index">
    15. 

  15.   <li><a href="#NAME">NAME</a></li>
    16. 

  16.   <li><a href="#SYNOPSIS">SYNOPSIS</a></li>
    17. 

  17.   <li><a href="#DESCRIPTION">DESCRIPTION</a></li>
    18. 

  18.   <li><a href="#OPTIONS">OPTIONS</a>
    19. 

  19.     <ul>
    20. 

  20.       <li><a href="#General-options">General options</a></li>
    21. 

  21.       <li><a href="#Input-options">Input options</a></li>
    22. 

  22.       <li><a href="#Output-options">Output options</a></li>
    23. 

  23.     </ul>
    24. 

  24.   </li>
    25. 

  25.   <li><a href="#EXAMPLES">EXAMPLES</a></li>
    26. 

  26.   <li><a href="#SEE-ALSO">SEE ALSO</a></li>
    27. 

  27.   <li><a href="#HISTORY">HISTORY</a></li>
    28. 

  28.   <li><a href="#COPYRIGHT">COPYRIGHT</a></li>
    29. 

  29. </ul>
    30. 

  30. 

  31. <h1 id="NAME">NAME</h1>
    32. 

  32. 

  33. <p>openssl-pkey - public or private key processing command</p>
    34. 

  34. 

  35. <h1 id="SYNOPSIS">SYNOPSIS</h1>
    36. 

  36. 

  37. <p><b>openssl</b> <b>pkey</b> [<b>-help</b>] [<b>-engine</b> <i>id</i>] [<b>-provider</b> <i>name</i>] [<b>-provider-path</b> <i>path</i>] [<b>-propquery</b> <i>propq</i>] [<b>-check</b>] [<b>-pubcheck</b>] [<b>-in</b> <i>filename</i>|<i>uri</i>] [<b>-inform</b> <b>DER</b>|<b>PEM</b>|<b>P12</b>|<b>ENGINE</b>] [<b>-passin</b> <i>arg</i>] [<b>-pubin</b>] [<b>-out</b> <i>filename</i>] [<b>-outform</b> <b>DER</b>|<b>PEM</b>] [<b>-<i>cipher</i></b>] [<b>-passout</b> <i>arg</i>] [<b>-traditional</b>] [<b>-pubout</b>] [<b>-noout</b>] [<b>-text</b>] [<b>-text_pub</b>] [<b>-ec_conv_form</b> <i>arg</i>] [<b>-ec_param_enc</b> <i>arg</i>]</p>
    38. 

  38. 

  39. <h1 id="DESCRIPTION">DESCRIPTION</h1>
    40. 

  40. 

  41. <p>This command processes public or private keys. They can be converted between various forms and their components printed.</p>
    42. 

  42. 

  43. <h1 id="OPTIONS">OPTIONS</h1>
    44. 

  44. 

  45. <h2 id="General-options">General options</h2>
    46. 

  46. 

  47. <dl>
    48. 

  48. 

  49. <dt id="help"><b>-help</b></dt>
    50. 

  50. <dd>
    51. 

  51. 

  52. <p>Print out a usage message.</p>
    53. 

  53. 

  54. </dd>
    55. 

  55. <dt id="engine-id"><b>-engine</b> <i>id</i></dt>
    56. 

  56. <dd>
    57. 

  57. 

  58. <p>See <a href="../man1/openssl.html">&quot;Engine Options&quot; in openssl(1)</a>. This option is deprecated.</p>
    59. 

  59. 

  60. </dd>
    61. 

  61. <dt id="provider-name"><b>-provider</b> <i>name</i></dt>
    62. 

  62. <dd>
    63. 

  63. 

  64. </dd>
    65. 

  65. <dt id="provider-path-path"><b>-provider-path</b> <i>path</i></dt>
    66. 

  66. <dd>
    67. 

  67. 

  68. </dd>
    69. 

  69. <dt id="propquery-propq"><b>-propquery</b> <i>propq</i></dt>
    70. 

  70. <dd>
    71. 

  71. 

  72. <p>See <a href="../man1/openssl.html">&quot;Provider Options&quot; in openssl(1)</a>, <a href="../man7/provider.html">provider(7)</a>, and <a href="../man7/property.html">property(7)</a>.</p>
    73. 

  73. 

  74. </dd>
    75. 

  75. <dt id="check"><b>-check</b></dt>
    76. 

  76. <dd>
    77. 

  77. 

  78. <p>This option checks the consistency of a key pair for both public and private components.</p>
    79. 

  79. 

  80. </dd>
    81. 

  81. <dt id="pubcheck"><b>-pubcheck</b></dt>
    82. 

  82. <dd>
    83. 

  83. 

  84. <p>This option checks the correctness of either a public key or the public component of a key pair.</p>
    85. 

  85. 

  86. </dd>
    87. 

  87. </dl>
    88. 

  88. 

  89. <h2 id="Input-options">Input options</h2>
    90. 

  90. 

  91. <dl>
    92. 

  92. 

  93. <dt id="in-filename-uri"><b>-in</b> <i>filename</i>|<i>uri</i></dt>
    94. 

  94. <dd>
    95. 

  95. 

  96. <p>This specifies the input to read a key from or standard input if this option is not specified. If the key input is encrypted and <b>-passin</b> is not given a pass phrase will be prompted for.</p>
    97. 

  97. 

  98. </dd>
    99. 

  99. <dt id="inform-DER-PEM-P12-ENGINE"><b>-inform</b> <b>DER</b>|<b>PEM</b>|<b>P12</b>|<b>ENGINE</b></dt>
    100. 

  100. <dd>
    101. 

  101. 

  102. <p>The key input format; unspecified by default. See <a href="../man1/openssl-format-options.html">openssl-format-options(1)</a> for details.</p>
    103. 

  103. 

  104. </dd>
    105. 

  105. <dt id="passin-arg"><b>-passin</b> <i>arg</i></dt>
    106. 

  106. <dd>
    107. 

  107. 

  108. <p>The password source for the key input.</p>
    109. 

  109. 

  110. <p>For more information about the format of <b>arg</b> see <a href="../man1/openssl-passphrase-options.html">openssl-passphrase-options(1)</a>.</p>
    111. 

  111. 

  112. </dd>
    113. 

  113. <dt id="pubin"><b>-pubin</b></dt>
    114. 

  114. <dd>
    115. 

  115. 

  116. <p>By default a private key is read from the input. With this option a public key is read instead. If the input contains no public key but a private key, its public part is used.</p>
    117. 

  117. 

  118. </dd>
    119. 

  119. </dl>
    120. 

  120. 

  121. <h2 id="Output-options">Output options</h2>
    122. 

  122. 

  123. <dl>
    124. 

  124. 

  125. <dt id="out-filename"><b>-out</b> <i>filename</i></dt>
    126. 

  126. <dd>
    127. 

  127. 

  128. <p>This specifies the output filename to save the encoded and/or text output of key or standard output if this option is not specified. If any cipher option is set but no <b>-passout</b> is given then a pass phrase will be prompted for. The output filename should <b>not</b> be the same as the input filename.</p>
    129. 

  129. 

  130. </dd>
    131. 

  131. <dt id="outform-DER-PEM"><b>-outform</b> <b>DER</b>|<b>PEM</b></dt>
    132. 

  132. <dd>
    133. 

  133. 

  134. <p>The key output format; the default is <b>PEM</b>. See <a href="../man1/openssl-format-options.html">openssl-format-options(1)</a> for details.</p>
    135. 

  135. 

  136. </dd>
    137. 

  137. <dt id="cipher"><b>-<i>cipher</i></b></dt>
    138. 

  138. <dd>
    139. 

  139. 

  140. <p>Encrypt the PEM encoded private key with the supplied cipher. Any algorithm name accepted by EVP_get_cipherbyname() is acceptable such as <b>aes128</b>. Encryption is not supported for DER output.</p>
    141. 

  141. 

  142. </dd>
    143. 

  143. <dt id="passout-arg"><b>-passout</b> <i>arg</i></dt>
    144. 

  144. <dd>
    145. 

  145. 

  146. <p>The password source for the output file.</p>
    147. 

  147. 

  148. <p>For more information about the format of <b>arg</b> see <a href="../man1/openssl-passphrase-options.html">openssl-passphrase-options(1)</a>.</p>
    149. 

  149. 

  150. </dd>
    151. 

  151. <dt id="traditional"><b>-traditional</b></dt>
    152. 

  152. <dd>
    153. 

  153. 

  154. <p>Normally a private key is written using standard format: this is PKCS#8 form with the appropriate encryption algorithm (if any). If the <b>-traditional</b> option is specified then the older &quot;traditional&quot; format is used instead.</p>
    155. 

  155. 

  156. </dd>
    157. 

  157. <dt id="pubout"><b>-pubout</b></dt>
    158. 

  158. <dd>
    159. 

  159. 

  160. <p>By default the private and public key is output; this option restricts the output to the public components. This option is automatically set if the input is a public key.</p>
    161. 

  161. 

  162. <p>When combined with <b>-text</b>, this is equivalent to <b>-text_pub</b>.</p>
    163. 

  163. 

  164. </dd>
    165. 

  165. <dt id="noout"><b>-noout</b></dt>
    166. 

  166. <dd>
    167. 

  167. 

  168. <p>Do not output the key in encoded form.</p>
    169. 

  169. 

  170. </dd>
    171. 

  171. <dt id="text"><b>-text</b></dt>
    172. 

  172. <dd>
    173. 

  173. 

  174. <p>Output the various key components in plain text (possibly in addition to the PEM encoded form). This cannot be combined with encoded output in DER format.</p>
    175. 

  175. 

  176. </dd>
    177. 

  177. <dt id="text_pub"><b>-text_pub</b></dt>
    178. 

  178. <dd>
    179. 

  179. 

  180. <p>Output in text form only the public key components (also for private keys). This cannot be combined with encoded output in DER format.</p>
    181. 

  181. 

  182. </dd>
    183. 

  183. <dt id="ec_conv_form-arg"><b>-ec_conv_form</b> <i>arg</i></dt>
    184. 

  184. <dd>
    185. 

  185. 

  186. <p>This option only applies to elliptic-curve based keys.</p>
    187. 

  187. 

  188. <p>This specifies how the points on the elliptic curve are converted into octet strings. Possible values are: <b>compressed</b> (the default value), <b>uncompressed</b> and <b>hybrid</b>. For more information regarding the point conversion forms please read the X9.62 standard. <b>Note</b> Due to patent issues the <b>compressed</b> option is disabled by default for binary curves and can be enabled by defining the preprocessor macro <b>OPENSSL_EC_BIN_PT_COMP</b> at compile time.</p>
    189. 

  189. 

  190. </dd>
    191. 

  191. <dt id="ec_param_enc-arg"><b>-ec_param_enc</b> <i>arg</i></dt>
    192. 

  192. <dd>
    193. 

  193. 

  194. <p>This option only applies to elliptic curve based public and private keys.</p>
    195. 

  195. 

  196. <p>This specifies how the elliptic curve parameters are encoded. Possible value are: <b>named_curve</b>, i.e. the ec parameters are specified by an OID, or <b>explicit</b> where the ec parameters are explicitly given (see RFC 3279 for the definition of the EC parameters structures). The default value is <b>named_curve</b>. <b>Note</b> the <b>implicitlyCA</b> alternative, as specified in RFC 3279, is currently not implemented in OpenSSL.</p>
    197. 

  197. 

  198. </dd>
    199. 

  199. </dl>
    200. 

  200. 

  201. <h1 id="EXAMPLES">EXAMPLES</h1>
    202. 

  202. 

  203. <p>To remove the pass phrase on a private key:</p>
    204. 

  204. 

  205. <pre><code>openssl pkey -in key.pem -out keyout.pem</code></pre>
    206. 

  206. 

  207. <p>To encrypt a private key using triple DES:</p>
    208. 

  208. 

  209. <pre><code>openssl pkey -in key.pem -des3 -out keyout.pem</code></pre>
    210. 

  210. 

  211. <p>To convert a private key from PEM to DER format:</p>
    212. 

  212. 

  213. <pre><code>openssl pkey -in key.pem -outform DER -out keyout.der</code></pre>
    214. 

  214. 

  215. <p>To print out the components of a private key to standard output:</p>
    216. 

  216. 

  217. <pre><code>openssl pkey -in key.pem -text -noout</code></pre>
    218. 

  218. 

  219. <p>To print out the public components of a private key to standard output:</p>
    220. 

  220. 

  221. <pre><code>openssl pkey -in key.pem -text_pub -noout</code></pre>
    222. 

  222. 

  223. <p>To just output the public part of a private key:</p>
    224. 

  224. 

  225. <pre><code>openssl pkey -in key.pem -pubout -out pubkey.pem</code></pre>
    226. 

  226. 

  227. <p>To change the EC parameters encoding to <b>explicit</b>:</p>
    228. 

  228. 

  229. <pre><code>openssl pkey -in key.pem -ec_param_enc explicit -out keyout.pem</code></pre>
    230. 

  230. 

  231. <p>To change the EC point conversion form to <b>compressed</b>:</p>
    232. 

  232. 

  233. <pre><code>openssl pkey -in key.pem -ec_conv_form compressed -out keyout.pem</code></pre>
    234. 

  234. 

  235. <h1 id="SEE-ALSO">SEE ALSO</h1>
    236. 

  236. 

  237. <p><a href="../man1/openssl.html">openssl(1)</a>, <a href="../man1/openssl-genpkey.html">openssl-genpkey(1)</a>, <a href="../man1/openssl-rsa.html">openssl-rsa(1)</a>, <a href="../man1/openssl-pkcs8.html">openssl-pkcs8(1)</a>, <a href="../man1/openssl-dsa.html">openssl-dsa(1)</a>, <a href="../man1/openssl-genrsa.html">openssl-genrsa(1)</a>, <a href="../man1/openssl-gendsa.html">openssl-gendsa(1)</a></p>
    238. 

  238. 

  239. <h1 id="HISTORY">HISTORY</h1>
    240. 

  240. 

  241. <p>The <b>-engine</b> option was deprecated in OpenSSL 3.0.</p>
    242. 

  242. 

  243. <h1 id="COPYRIGHT">COPYRIGHT</h1>
    244. 

  244. 

  245. <p>Copyright 2006-2023 The OpenSSL Project Authors. All Rights Reserved.</p>
    246. 

  246. 

  247. <p>Licensed under the Apache License 2.0 (the &quot;License&quot;). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a>.</p>
    248. 

  248. 

  249. 

  250. </body>
    251. 

  251. 

  252. </html>
    253. 

  253. 

  254.