Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Reference_description_with_linked_URLs_______________________Notes______________________________________________________________


https://www.openssl.org/

https://www.openssl.org/docs/

https://www.openssl.org/docs/man1.1.1/


https://www.openssl.org/docs/OpenSSLStrategicArchitecture.html

Openssl Cookbook - 2016 - gdrive

openssl-cookbook.pdf

Openssl Cookbook - reasonably thorough

https://www.freecodecamp.org/news/openssl-command-cheatsheet-b441be1e8c4a/

openssl-common-rsa-commands-zmq_bi_2014_Magic Quadrant for Business Intelligence and Analytics Platforms.pdf

Common Openssl commands from freecodecamp

https://slproweb.com/products/Win32OpenSSL.htmlOpenssl Windows binaries

Linux includes openssl  ...   openssl version -a   ( shows details )
https://phoenixnap.com/kb/openssl-tutorial-ssl-certificates-private-keys-csrsTutorial creating ssl certificates with openssl


https://www.pixelstech.net/article/1408345768-Different-types-of-keystore-in-Java----OverviewJava Keystore types
https://docs.oracle.com/javase/9/tools/keytool.htm#JSWOR-GUID-5990A2E4-78E3-47B7-AE75-6D1826259549Java keytool for CA administration


https://www.geotrust.com/resources/csr/apache_mod_ssl.htm

openssl-create-server-cert-process-geotrust.com-Generate a Certificate Signing Request CSR.pdf

common openssl process to create a server certificate for ssl - geotrust


https://www.thewindowsclub.com/manage-trusted-root-certificates-windows

windows10-certificate-trust-mgt-mmc-thewindowsclub.com-How to manage Trusted Root Certificates in Windows 10.pdf

Using Windows 10 Trust store with MMC

Mozilla keeps the trust store in the source code repository:

This file contains the object definitions for the certs and other
# information "built into" NSS.

https://support.google.com/a/answer/6342198?hl=en


Generate Keys and Certificates for SSO for a GSuite account

how to create keys, certificates and link them to a GSuite account



https://letsencrypt.org/

https://letsencrypt.org/docs/

https://letsencrypt.org/how-it-works/

Let's encrypt or other root CAs - provides certs, CAAS - certificate admin as a service using a client agent on your server

Let's Encrypt has short key rotation ( 90 days or less to expiration )

https://caddyserver.com/docs/automatic-https#overview
  • Caddy serves IP addresses and local/internal hostnames over HTTPS using self-signed certificates – Examples: localhost, 127.0.0.1
  • Caddy serves public DNS names over HTTPS using certificates from a public ACME CA such as Let's Encrypt or ZeroSSL.: sub.example.com, *.example.com

Caddy keeps all managed certificates renewed and redirects HTTP



https://upcloud.com/community/tutorials/use-ssh-keys-authentication/Using ssh with Openssl or Puttygen **


https://security.stackexchange.com/questions/146360/ssh-keypair-works-in-putty-but-not-in-openssh-inside-the-puttys-session

Puttygen keys are not compatible with OpenSSH or OpenSSL

Puttygen's private key format (PPK) can by converted OpenSSL format



https://serverfault.com/questions/9708/what-is-a-pem-file-and-how-does-it-differ-from-other-openssl-generated-key-fileCommon certificate and key file formats
https://www.https.in/ssl-security/renew-ssl-certificate-steps/
ssl-How to Renew SSL Certificate for my Website.pdf
Renew SSL certificates **
https://docs.aws.amazon.com/acm/index.htmlAWS ACM certificate management **
https://awsbytes.com/certificate-manager-cli-commands/AWS ACM CLI commands *



Simple ssh - Using ssh with Openssl or Puttygen on Linux or Windows

...