#ssl

Posts on x2q tagged ssl. Updated as new posts are published.

• May 6, 2009

  Inspect and verify a TLS certificate with OpenSSL (2026)

  OpenSSL reads X.509 certificates so you can check the subject, SANs, issuer, and expiry — and confirm a cert matches the private key it's paired with. Includes the s_client trick for inspecting what a live HTTPS server is really serving.

• Sep 3, 2006

  Remove the passphrase from a private key with OpenSSL (2026)

  An encrypted private key makes Apache/nginx prompt for a passphrase on every start — a problem for unattended reboots. OpenSSL can write an unencrypted copy. Here's how, for RSA/EC/any key, plus why you should lock the file down and what the safer alternatives are.