OpenSSL: Essentials - Revision history

Onnowpurbo: /* OpenSSL Version */

2017-06-10T22:07:24Z

OpenSSL Version

← Older revision		Revision as of 22:07, 10 June 2017
Line 287:		Line 287:
	==OpenSSL Version==		==OpenSSL Version==

	~~The~~ openssl ~~version command can be used to check which version you are running~~. ~~The version of~~ OpenSSL ~~that you are running~~, ~~and the options it was compiled with affect the capabilities~~ (~~and sometimes the command line options~~) ~~that are available to you~~.		Perintah versi openssl dapat digunakan untuk memeriksa versi yang anda jalankan. Versi OpenSSL yang anda jalankan, dan opsi yang dikompilasi dengan mempengaruhi kemampuan (dan terkadang opsi CLI) yang tersedia untuk anda.

	~~The following command displays the~~ OpenSSL ~~version that you are running~~, ~~and all of the options that it was compiled with~~:		Perintah berikut menampilkan versi OpenSSL yang anda jalankan, dan semua opsi yang dikompilasi dengan:

	openssl version -a		openssl version -a

	~~This guide was written using an~~ OpenSSL ~~binary with the following details~~ (~~the~~ output ~~of the previous command~~):		Panduan ini ditulis menggunakan biner OpenSSL dengan rincian sebagai berikut (output dari perintah sebelumnya):

	OpenSSL 1.0.2g-fips 1 Mar 2016		OpenSSL 1.0.2g-fips 1 Mar 2016

Onnowpurbo: /* Convert PKCS12 to PEM */

2017-06-10T22:05:34Z

Convert PKCS12 to PEM

← Older revision		Revision as of 22:05, 10 June 2017
Line 275:		Line 275:
	PKCS12 files, juga dikenal sebagai PFX file, biasanya digunakan untuk import dan export certificate chain di Micrsoft IIS (Windows).		PKCS12 files, juga dikenal sebagai PFX file, biasanya digunakan untuk import dan export certificate chain di Micrsoft IIS (Windows).

	===Convert PKCS12 to PEM===		===Convert PKCS12 ke PEM===

	~~Use this command if you want to~~ convert a PKCS12 file (domain.pfx) ~~and convert it to~~ PEM format (domain.combined.crt):		Gunakan perintah ini jika anda ingin convert PKCS12 file (domain.pfx) dan mengkonversikan-nya ke PEM format (domain.combined.crt):

	openssl pkcs12 \		openssl pkcs12 \
Line 283:		Line 283:
	-nodes -out domain.combined.crt		-nodes -out domain.combined.crt

	~~Note that if your~~ PKCS12 file ~~has multiple items in it~~ (~~e.g. a~~ certificate ~~and~~ private key), ~~the~~ PEM file ~~that is created will contain all of the items in it~~.		Perlu di catat bahwa PKCS12 file mempunyai banyak item di dalamnya (seperti certificate dan private key), PEM file yang dibuat akan berisi semua item tersebut di dalamnya.

	==OpenSSL Version==		==OpenSSL Version==

Onnowpurbo: /* Convert PEM ke PKCS12 */

2017-06-10T22:03:58Z

Convert PEM ke PKCS12

← Older revision		Revision as of 22:03, 10 June 2017
Line 264:		Line 264:
	===Convert PEM ke PKCS12===		===Convert PEM ke PKCS12===

	~~Use this command if you want to take a~~ private key (domain.key) ~~and a~~ certificate (domain.crt), ~~and combine them into a~~ PKCS12 file (domain.pfx):		Gunakan perintah ini jika anda ingin mengambil private key (domain.key) dan sebuah certificate (domain.crt), dan menggabungkannya menjadi PKCS12 file (domain.pfx):

	openssl pkcs12 \		openssl pkcs12 \
Line 271:		Line 271:
	-export -out domain.pfx		-export -out domain.pfx

	~~You will be prompted for~~ export ~~passwords~~, ~~which you may leave blank~~. ~~Note that you may add a chain of certificates to the~~ PKCS12 file ~~by concatenating the certificates together in a single~~ PEM file (domain.crt) ~~in this case~~.		Anda akan di tanyakan untuk export password, yang mana dapat anda biarkan kosong. Perlu di catat bahwa anda dapat menambahkan rantai certificate ke PKCS12 file dengan cara menyambungkan semua certificate ini menjadi sebuah PEM file (domain.crt).

	PKCS12 files, ~~also known as~~ PFX ~~files~~, ~~are typically used for importing and exporting~~ certificate ~~chains in~~ Micrsoft IIS (Windows).		PKCS12 files, juga dikenal sebagai PFX file, biasanya digunakan untuk import dan export certificate chain di Micrsoft IIS (Windows).

	===Convert PKCS12 to PEM===		===Convert PKCS12 to PEM===

Onnowpurbo: /* Convert Certificate Formats */

2017-06-10T22:01:09Z

Convert Certificate Formats

← Older revision		Revision as of 22:01, 10 June 2017
Line 215:		Line 215:
	Masukan pass phrase untuk encrypted key saat ditanyakan.		Masukan pass phrase untuk encrypted key saat ditanyakan.

	==Convert Certificate ~~Formats~~==		==Convert Certificate Format==

	~~All of the certificates that we have been working with have been~~ X.509 ~~certificates that are~~ ASCII ~~PEM encoded~~. ~~There are a variety of other certificate encoding and container types~~; ~~some applications prefer certain formats over others~~. ~~Also~~, ~~many of these formats can contain multiple items~~, ~~such as a private key~~, ~~certificate~~, ~~and~~ CA ~~certificate~~, ~~in a single~~ file.		Semua sertifikat yang telah kita kerjakan adalah sertifikat X.509 yang dikodekan ASCII. Ada berbagai jenis pengkodean dan wadah sertifikat lainnya; Beberapa aplikasi lebih memilih format tertentu daripada yang lain. Selain itu, banyak format ini dapat berisi beberapa item, seperti sertifikat kunci pribadi, sertifikat, dan CA, dalam satu file.

	OpenSSL ~~can be used to convert certificates to and from a large variety of these formats~~. ~~This section will cover a some of the possible conversions~~.		OpenSSL dapat digunakan untuk mengkonversi sertifikat ke dan dari berbagai format ini. Bagian ini akan mencakup beberapa kemungkinan konversi.

	===Convert PEM to DER===		===Convert PEM ke DER===

	~~Use this command if you want to~~ convert a PEM-encoded certificate (domain.crt) ~~to a~~ DER-encoded certificate (domain.der), a binary ~~format~~:		Gunakan perintah berikut jika anda ingin convert a PEM-encoded certificate (domain.crt) ke DER-encoded certificate (domain.der), sebuah format binary:

	openssl x509 \		openssl x509 \
Line 229:		Line 229:
	-outform der -out domain.der		-outform der -out domain.der

	~~The~~ DER ~~format is typically used with~~ Java.		Format DER biasanya digunakan di Java.

	===Convert DER to PEM===		===Convert DER ke PEM===

	~~Use this command if you want to~~ convert a DER-encoded certificate (domain.der) ~~to a~~ PEM-encoded certificate (domain.crt):		Gunakan perinntah ini untuk convert a DER-encoded certificate (domain.der) ke PEM-encoded certificate (domain.crt):

	openssl x509 \		openssl x509 \
Line 241:		Line 241:
	===Convert PEM to PKCS7===		===Convert PEM to PKCS7===

	~~Use this command if you want to add~~ PEM certificates (domain.crt ~~and~~ ca-chain.crt) ~~to a~~ PKCS7 ~~file~~ (domain.p7b):		Gunakan perintah ini jika anda ingin menambahkan PEM certificates (domain.crt dan ca-chain.crt) ke file PKCS7 (domain.p7b):

	openssl crl2pkcs7 -nocrl \		openssl crl2pkcs7 -nocrl \
Line 248:		Line 248:
	-out domain.p7b		-out domain.p7b

	~~Note that you can use one or more~~ -certfile ~~options to specify which certificates to add to the~~ PKCS7 ~~file~~.		Catatan bahwa anda bisa menggunakan satu atau lebih opsi -certfile untuk memberitahukan certificate mana yang akan ditambahkan ke file PKCS7 .

	PKCS7 ~~files~~, ~~also known as~~ P7B, ~~are typically used in~~ Java Keystores ~~and~~ Microsoft IIS (Windows). ~~They are~~ ASCII ~~files which can contain certificates and~~ CA ~~certificates~~.		File PKCS7, juga di kenal sebagai P7B, biasanya digunakan di Java Keystores dan Microsoft IIS (Windows). Ini adalah file ASCII yang berisi certificate dan CA certificate.

	===Convert PKCS7 to PEM===		===Convert PKCS7 ke PEM===

	~~Use this command if you want to~~ convert a PKCS7 file (domain.p7b) ~~to a~~ PEM file:		Gunakan perintah ini jika kita ingin convert PKCS7 file (domain.p7b) ke PEM file:

	openssl pkcs7 \		openssl pkcs7 \
Line 260:		Line 260:
	-print_certs -out domain.crt		-print_certs -out domain.crt

	~~Note that if your~~ PKCS7 file ~~has multiple items in it~~ (~~e.g. a~~ certificate ~~and a~~ CA intermediate certificate), ~~the~~ PEM file ~~that is created will contain all of the items in it~~.		Perlu di catat jika PKCS7 file anda mempunyai banyak item dalamnya (misalnya certificate dan CA intermediate certificate), maka PEM file yang dibuat akan berisi semua item tersebut.

	===Convert PEM to PKCS12===		===Convert PEM ke PKCS12===

	Use this command if you want to take a private key (domain.key) and a certificate (domain.crt), and combine them into a PKCS12 file (domain.pfx):		Use this command if you want to take a private key (domain.key) and a certificate (domain.crt), and combine them into a PKCS12 file (domain.pfx):

Onnowpurbo: /* Decrypt a Private Key */

2017-06-10T21:54:54Z

Decrypt a Private Key

← Older revision		Revision as of 21:54, 10 June 2017
Line 207:		Line 207:
	===Decrypt a Private Key===		===Decrypt a Private Key===

	~~This takes an~~ encrypted private key (encrypted.key) ~~and outputs a~~ decrypted ~~version of it~~ (decrypted.key):		Ini akan mengambil encrypted private key (encrypted.key) dan mengeluarkan decrypted private key (decrypted.key):

	openssl rsa \		openssl rsa \
Line 213:		Line 213:
	-out decrypted.key		-out decrypted.key

	~~Enter the~~ pass phrase ~~for the~~ encrypted key ~~when prompted~~.		Masukan pass phrase untuk encrypted key saat ditanyakan.

	==Convert Certificate Formats==		==Convert Certificate Formats==

Onnowpurbo: /* Verify a Private Key Matches a Certificate and CSR */

2017-06-10T21:53:51Z

Verify a Private Key Matches a Certificate and CSR

← Older revision		Revision as of 21:53, 10 June 2017
Line 193:		Line 193:
	openssl req -noout -modulus -in domain.csr \| openssl md5		openssl req -noout -modulus -in domain.csr \| openssl md5

	~~If the~~ output ~~of each command is identical there is an extremely high probability that the~~ private key, certificate, ~~and~~ CSR ~~are related~~.		Jika output masing-masing perintah ini sama, maka kemungkinan besar private key, certificate, dan CSR saling terkait / berhubungan.

	===Encrypt a Private Key===		===Encrypt a Private Key===

Onnowpurbo: /* Encrypt a Private Key */

2017-06-10T21:53:00Z

Encrypt a Private Key

← Older revision		Revision as of 21:53, 10 June 2017
Line 197:		Line 197:
	===Encrypt a Private Key===		===Encrypt a Private Key===

	~~This takes an~~ unencrypted private key (unencrypted.key) ~~and outputs an~~ encrypted ~~version of it~~ (encrypted.key):		Perintah ini akan mengambil unencrypted private key (unencrypted.key) dan mengeluarkan encrypted private key (encrypted.key):

	openssl rsa -des3 \		openssl rsa -des3 \
Line 203:		Line 203:
	-out encrypted.key		-out encrypted.key

	~~Enter your desired~~ pass phrase~~, to~~ encrypt ~~the~~ private key ~~with~~.		Masukan pass phrase yang anda inginkan untuk meng-encrypt private key tersebut.

	===Decrypt a Private Key===		===Decrypt a Private Key===

Onnowpurbo: /* Introduction */

2017-06-10T21:47:50Z

Introduction

← Older revision		Revision as of 21:47, 10 June 2017
Line 4:		Line 4:
	==Introduction==		==Introduction==

	OpenSSL ~~is a versatile command line~~ tool ~~that can be used for a large variety of tasks related to~~ Public Key Infrastructure (PKI) ~~and~~ HTTPS (HTTP over TLS). ~~This~~ cheat sheet ~~style guide provides a quick reference to~~ OpenSSL ~~commands that are useful in common~~, ~~everyday scenarios~~. ~~This includes~~ OpenSSL ~~examples of generating private keys~~, ~~certificate signing requests~~, ~~and certificate~~ format ~~conversion~~. ~~It does not cover all of the uses of~~ OpenSSL.		OpenSSL adalah tool CLI serbaguna yang dapat digunakan untuk berbagai macam tugas yang berkaitan dengan Public Key Infrastructure (PKI) dan HTTPS (HTTP over TLS). Panduan gaya cheat sheet ini memberikan referensi cepat untuk perintah OpenSSL yang berguna dalam umum, skenario sehari-hari. Ini termasuk contoh OpenSSL untuk menghasilkan kunci pribadi, permintaan penandatanganan sertifikat, dan konversi format sertifikat. Ini tidak mencakup semua penggunaan OpenSSL.

	Cara menggunakan panduan ini:		Cara menggunakan panduan ini:

Onnowpurbo: /* Private Key */

2017-06-09T00:00:16Z

Private Key

← Older revision		Revision as of 00:00, 9 June 2017
Line 166:		Line 166:
	==Private Key==		==Private Key==

	~~This section covers~~ OpenSSL ~~commands that are specific to creating and verifying~~ private ~~keys~~.		Bagian ini akan membahas perintah OpenSSL yang berkaitan dengan pembuatan dan verifikasi private key.

	===Create a Private Key===		===Create a Private Key===

	~~Use this command to create a~~ password-protected, 2048-bit private key (domain.key):		Gunakan perintah ini untuk membuat sebuah password-protected, 2048-bit private key (domain.key):

	openssl genrsa -des3 -out domain.key 2048		openssl genrsa -des3 -out domain.key 2048

	~~Enter a~~ password ~~when prompted to complete the process~~.		Masukan password jika di tanya, saat menyelesaikan proses.

	===Verify a Private Key===		===Verify a Private Key===

	~~Use this command to check that a~~ private key (domain.key) ~~is a~~ valid key:		Gunakan perintah ini untuk mencek apakah sebuah private key (domain.key) adalah valid key:

	openssl rsa -check -in domain.key		openssl rsa -check -in domain.key

	~~If your~~ private key ~~is encrypted~~, ~~you will be prompted for its~~ pass phrase. ~~Upon success~~, ~~the unencrypted~~ key ~~will be output on the~~ terminal.		Jika private key anda di enkripsi, anda akan ditanyakan pass phrase.
			Jika sukses, key yang tidak di enkripsi akan di keluarkan pada terminal.

	===Verify a Private Key Matches a Certificate and CSR===		===Verify a Private Key Matches a Certificate and CSR===

	~~Use these commands to verify if a~~ private key (domain.key) ~~matches a~~ certificate (domain.crt) ~~and~~ CSR (domain.csr):		Gunakan perintah ini untuk mem-verifikasi apakah sebuah private key (domain.key) cocok dengan certificate (domain.crt) dan CSR (domain.csr) sebuah domain:

	openssl rsa -noout -modulus -in domain.key \| openssl md5		openssl rsa -noout -modulus -in domain.key \| openssl md5

Onnowpurbo: /* Private Keys */

2017-06-08T23:46:15Z

Private Keys

← Older revision		Revision as of 23:46, 8 June 2017
Line 164:		Line 164:
	openssl verify -verbose -CAFile ca.crt domain.crt		openssl verify -verbose -CAFile ca.crt domain.crt

	==Private ~~Keys~~==		==Private Key==

	This section covers OpenSSL commands that are specific to creating and verifying private keys.		This section covers OpenSSL commands that are specific to creating and verifying private keys.