OPENSSL(1ssl) OpenSSL OPENSSL(1ssl) openssl - openssl [ ... ] [ ... ] openssl no-XXX [ ] openssl -help | -version OpenSSL (SSL) (TLS) . openssl crypto . o o o X.509 (CSRs) (CRLs) o o o SSL/TLS o S/MIME o openssl ( "" ). . ( openssl-x509(1)). openssl-list(1) . no-XXX . XXX 0 () no-XXX 1 XXX. stdout stderr. . openssl. ( no-XXX quit list no-XXX .) -config . openssl.cnf openssl-version(1) -d -a. OPENSSL_CONF ( ). . config(5) . asn1parse ASN.1. ca (CA). ciphers . cms CMS ( ). crl (CRL). crl2pkcs7 CRL PKCS#7. dgst . MAC openssl-mac(1). dhparam -. openssl-genpkey(1) openssl-pkeyparam(1). dsa DSA. dsaparam DSA. openssl-genpkey(1) openssl-pkeyparam(1). ec (EC). ecparam EC. enc . engine ( ). errstr . fipsinstall FIPS. gendsa DSA . openssl-genpkey(1) openssl-pkey(1). genpkey . genrsa RSA . openssl-genpkey(1). help . info . kdf . list . mac . nseq Netscape . ocsp (OCSP). passwd . pkcs12 PKCS#12. pkcs7 PKCS#7. pkcs8 PKCS#8. pkey . pkeyparam . pkeyutl . prime . rand . rehash (CRL) . req (CSR) PKCS#10 X.509. rsa RSA. rsautl RSA . openssl-pkeyutl(1). s_client SSL/TLS SSL/TLS. ssl OpenSSL. s_server SSL/TLS SSL/TLS. ssl OpenSSL. SSL HTTP SSL/TLS. s_time SSL. sess_id SSL. smime S/MIME. speed . spkac SPKAC. srp SRP. . storeutl (CRL) . ts . verify X.509. openssl-verification-options(1). version OpenSSL. x509 X.509. blake2b512 BLAKE2b-512 blake2s256 BLAKE2s-256 md2 MD2 md4 MD4 md5 MD5 mdc2 MDC2 rmd160 RMD-160 sha1 SHA-1 sha224 SHA-2 224 sha256 SHA-2 256 sha384 SHA-2 384 sha512 SHA-2 512 sha3-224 SHA-3 224 sha3-256 SHA-3 256 sha3-384 SHA-3 384 sha3-512 SHA-3 512 keccak-224 KECCAK 224 keccak-256 KECCAK 256 keccak-384 KECCAK 384 keccak-512 KECCAK 512 shake128 SHA-3 SHAKE128 shake256 SHA-3 SHAKE256 sm3 SM3 . OpenSSL . openssl-enc(1) . aes128 aes-128-cbc aes-128-cfb aes-128-ctr aes-128-ecb aes-128-ofb AES-128 aes192 aes-192-cbc aes-192-cfb aes-192-ctr aes-192-ecb aes-192-ofb AES-192 aes256 aes-256-cbc aes-256-cfb aes-256-ctr aes-256-ecb aes-256-ofb AES-256 aria128 aria-128-cbc aria-128-cfb aria-128-ctr aria-128-ecb aria-128-ofb Aria-128 aria192 aria-192-cbc aria-192-cfb aria-192-ctr aria-192-ecb aria-192-ofb Aria-192 aria256 aria-256-cbc aria-256-cfb aria-256-ctr aria-256-ecb aria-256-ofb Aria-256 base64 Base64 bf bf-cbc bf-cfb bf-ecb bf-ofb Blowfish camellia128 camellia-128-cbc camellia-128-cfb camellia-128-ctr camellia-128-ecb camellia-128-ofb Camellia-128 camellia192 camellia-192-cbc camellia-192-cfb camellia-192-ctr camellia-192-ecb camellia-192-ofb Camellia-192 camellia256 camellia-256-cbc camellia-256-cfb camellia-256-ctr camellia-256-ecb camellia-256-ofb Camellia-256 cast cast-cbc CAST cast5-cbc cast5-cfb cast5-ecb cast5-ofb CAST5 chacha20 Chacha20 des des-cbc des-cfb des-ecb des-ede des-ede-cbc des-ede-cfb des-ede-ofb des-ofb DES des3 desx des-ede3 des-ede3-cbc des-ede3-cfb des-ede3-ofb Triple-DES idea idea-cbc idea-cfb idea-ecb idea-ofb IDEA rc2 rc2-cbc rc2-cfb rc2-ecb rc2-ofb RC2 rc4 RC4 rc5 rc5-cbc rc5-cfb rc5-ecb rc5-ofb RC5 seed seed-cbc seed-cfb seed-ecb seed-ofb SEED sm4 sm4-cbc sm4-cfb sm4-ctr sm4-ecb sm4-ofb SM4 . . . -help . -help. --help . -version openssl. openssl-version(1). --version . -help "" . -- . : openssl verify [flags...] -- -cert1.pem... openssl-format-options(1). openssl-passphrase-options(1). OpenSSL 1.1.1 . OpenSSL (entropy) . . -rand -writerand. -rand files . . ";" MS-Windows "," OpenVMS ":" . . -writerand file file . . openssl-verification-options(1). openssl-namedisplay-options(1). TLS SSL TLS DTLS. TLS . TCP ( SSL TLS) UDP ( DTLS). OpenSSL. -ssl3 -tls1 -tls1_1 -tls1_2 -tls1_3 -no_ssl3 -no_tls1 -no_tls1_1 -no_tls1_2 -no_tls1_3 SSL TLS . TLS . no_. no_* s_time ciphers s_client s_server. -dtls -dtls1 -dtls1_2 DTLS TLS. -dtls DTLS . -dtls1 -dtls1_2 DTLS1.0 DTLS1.2 . -engine id id ( .) " " config(5). -key -keyform engine. "loader_attic" OpenSSL CRL . . "file:" () . -key URI OpenSSL "org.openssl.engine:" . URI : org.openssl.engine:{engineid}:{keyid} "{engineid}" / "{keyid}" . PKCS#11 URI ( PKCS#11 OpenSC): -key org.openssl.engine:pkcs11:label_some-private-key OSSL_STORE_LOADER(3) "org.openssl.engine:" . PKCS#11 URI PKCS#11 RFC 7512 : -key pkcs11:object=some-private-key;pin-value=1234 -provider name name. name . . . "MODULESDIR" OPENSSL_MODULES -provider-path . provider(7) . -provider-path path . OPENSSL_MODULES. -provparam [name:]key=value key val name () name . . . . UTF8 . . -propquery propq . property(7) . OpenSSL . OpenSSL OPENSSL_CONF OPENSSL_MODULES OPENSSL_TRACE openssl-env(7). "ENVIRONMENT" config(5). openssl-engine(1) openssl-rehash(1) tsget(1). OPENSSL_ia32cap(3) OPENSSL_ppccap(3) OPENSSL_s390xcap(3) OPENSSL_riscvcap(3). openssl-asn1parse(1) openssl-ca(1) openssl-ciphers(1) openssl-cms(1) openssl-crl(1) openssl-crl2pkcs7(1) openssl-dgst(1) openssl-dhparam(1) openssl-dsa(1) openssl-dsaparam(1) openssl-ec(1) openssl-ecparam(1) openssl-enc(1) openssl-engine(1) openssl-errstr(1) openssl-gendsa(1) openssl-genpkey(1) openssl-genrsa(1) openssl-kdf(1) openssl-list(1) openssl-mac(1) openssl-nseq(1) openssl-ocsp(1) openssl-passwd(1) openssl-pkcs12(1) openssl-pkcs7(1) openssl-pkcs8(1) openssl-pkey(1) openssl-pkeyparam(1) openssl-pkeyutl(1) openssl-prime(1) openssl-rand(1) openssl-rehash(1) openssl-req(1) openssl-rsa(1) openssl-rsautl(1) openssl-s_client(1) openssl-s_server(1) openssl-s_time(1) openssl-sess_id(1) openssl-smime(1) openssl-speed(1) openssl-spkac(1) openssl-srp(1) openssl-storeutl(1) openssl-ts(1) openssl-verify(1) openssl-version(1) openssl-x509(1) config(5) crypto(7) openssl-env(7). ssl(7) x509v3_config(5) list -XXX-algorithms OpenSSL 1.0.0 . -issuer_checks 1.1.0 OpenSSL . -xcertform -xkeyform 3.0 OpenSSL . "openssl" 3.0 OpenSSL "openssl help" . 2000-2025 OpenSSL. . Apache 2.0 ( ""). . LICENSE . 3 . . : . 3.6.2 7 2026 OPENSSL(1ssl)