OPENSSL(1) OpenSSL OPENSSL(1) (NAME) openssl - OpenSSL (SYNOPSIS) openssl command [ ... ] [ ... ] openssl no-XXX [ ] openssl -help | -version (DESCRIPTION) OpenSSL (SSL) (TLS) . openssl crypto OpenSSL . : o o o X.509 (CSR) (CRL) o (Message Digests) (MAC) o (Ciphers) o SSL/TLS o S/MIME o (Timestamp) (COMMANDS) openssl ( (SYNOPSIS) command ). . ( openssl-x509(1)). openssl-list(1) . no-XXX . XXX 0 () no-XXX 1 XXX . stdout stderr . . openssl ( no-XXX quit list no-XXX ). (Configuration Option) -config . openssl.cnf openssl-version(1) -d -a . OPENSSL_CONF ( ) . . config(5) . (Standard Commands) asn1parse ASN.1. ca (CA). ciphers (Cipher Suites). cms (CMS Cryptographic Message Syntax). crl (CRL). crl2pkcs7 CRL PKCS#7. dgst (Message Digest). MAC openssl-mac(1) . dhparam - (Diffie-Hellman). openssl-genpkey(1) openssl-pkeyparam(1) . dsa DSA. dsaparam DSA. openssl-genpkey(1) openssl-pkeyparam(1) . ec EC ( ). ecparam EC. enc . engine (Engine - ). errstr . fipsinstall FIPS. gendsa DSA . openssl-genpkey(1) openssl-pkey(1) . genpkey . genrsa RSA. openssl-genpkey(1) . help . info OpenSSL. kdf (Key Derivation Functions). list . mac (MAC). nseq Netscape. ocsp (OCSP). passwd . pkcs12 PKCS#12. pkcs7 PKCS#7. pkcs8 PKCS#8. pkey . pkeyparam . pkeyutl . prime . rand . rehash CRL . req (CSR) PKCS#10 X.509. rsa RSA. rsautl RSA . openssl-pkeyutl(1) . s_client SSL/TLS SSL/TLS . ssl OpenSSL . s_server SSL/TLS SSL/TLS . ssl OpenSSL . SSL HTTP SSL/TLS . s_time SSL. sess_id SSL. smime S/MIME. speed . spkac SPKAC. srp SRP. . storeutl CRL . ts (TSA). verify X.509. openssl-verification-options(1) . version OpenSSL. x509 X.509. (Message Digest Commands) blake2b512 BLAKE2b-512 blake2s256 BLAKE2s-256 md2 MD2 md4 MD4 md5 MD5 mdc2 MDC2 rmd160 RMD-160 sha1 SHA-1 sha224 SHA-2 224 sha256 SHA-2 256 sha384 SHA-2 384 sha512 SHA-2 512 sha3-224 SHA-3 224 sha3-256 SHA-3 256 sha3-384 SHA-3 384 sha3-512 SHA-3 512 keccak-224 KECCAK 224 keccak-256 KECCAK 256 keccak-384 KECCAK 384 keccak-512 KECCAK 512 shake128 SHA-3 SHAKE128 shake256 SHA-3 SHAKE256 sm3 SM3 (Encryption, Decryption, and Encoding Commands) . OpenSSL . openssl-enc(1) . aes128, aes-128-cbc, aes-128-cfb, aes-128-ctr, aes-128-ecb, aes-128-ofb AES-128 aes192, aes-192-cbc, aes-192-cfb, aes-192-ctr, aes-192-ecb, aes-192-ofb AES-192 aes256, aes-256-cbc, aes-256-cfb, aes-256-ctr, aes-256-ecb, aes-256-ofb AES-256 aria128, aria-128-cbc, aria-128-cfb, aria-128-ctr, aria-128-ecb, aria-128-ofb Aria-128 aria192, aria-192-cbc, aria-192-cfb, aria-192-ctr, aria-192-ecb, aria-192-ofb Aria-192 aria256, aria-256-cbc, aria-256-cfb, aria-256-ctr, aria-256-ecb, aria-256-ofb Aria-256 base64 Base64 bf, bf-cbc, bf-cfb, bf-ecb, bf-ofb Blowfish camellia128, camellia-128-cbc, camellia-128-cfb, camellia-128-ctr, camellia-128-ecb, camellia-128-ofb Camellia-128 camellia192, camellia-192-cbc, camellia-192-cfb, camellia-192-ctr, camellia-192-ecb, camellia-192-ofb Camellia-192 camellia256, camellia-256-cbc, camellia-256-cfb, camellia-256-ctr, camellia-256-ecb, camellia-256-ofb Camellia-256 cast, cast-cbc CAST cast5-cbc, cast5-cfb, cast5-ecb, cast5-ofb CAST5 chacha20 Chacha20 des, des-cbc, des-cfb, des-ecb, des-ede, des-ede-cbc, des-ede-cfb, des-ede-ofb, des-ofb DES des3, desx, des-ede3, des-ede3-cbc, des-ede3-cfb, des-ede3-ofb Triple-DES idea, idea-cbc, idea-cfb, idea-ecb, idea-ofb IDEA rc2, rc2-cbc, rc2-cfb, rc2-ecb, rc2-ofb RC2 rc4 RC4 rc5, rc5-cbc, rc5-cfb, rc5-ecb, rc5-ofb RC5 seed, seed-cbc, seed-cfb, seed-ecb, seed-ofb SEED sm4, sm4-cbc, sm4-cfb, sm4-ctr, sm4-ecb, sm4-ofb SM4 (OPTIONS) . . (Program Options) . -help . -help . --help . -version openssl . openssl-version(1) . --version . (Common Options) -help <<>> . -- . : openssl verify [flags...] -- -cert1.pem... (Format Options) openssl-format-options(1) . (Pass Phrase Options) openssl-passphrase-options(1) . (Random State Options) OpenSSL 1.1.1 . OpenSSL (Seed) . . -rand -writerand . -rand files (Seed) . . MS-Windows ";" OpenVMS "," ":" . . -writerand file file . . (Certificate Verification Options) openssl-verification-options(1) . (Name Format Options) openssl-namedisplay-options(1) . TLS (TLS Version Options) SSL TLS DTLS . TLS . TCP ( SSL TLS) UDP ( DTLS) . OpenSSL . -ssl3, -tls1, -tls1_1, -tls1_2, -tls1_3, -no_ssl3, -no_tls1, -no_tls1_1, -no_tls1_2, -no_tls1_3 SSL TLS . TLS . no_ . no_* s_time ciphers s_client s_server . -dtls, -dtls1, -dtls1_2 TLS DTLS . -dtls DTLS . -dtls1 -dtls1_2 DTLS1.0 DTLS1.2 . (Engine Options) -engine id id ( ) <> config(5) . -keyform engine -key . "loader_attic" OpenSSL CRL . . "file:" () . -key URI OpenSSL "org.openssl.engine:" . URI : org.openssl.engine:{engineid}:{keyid} "{engineid}" / "{keyid}" . PKCS#11 URI ( PKCS#11 OpenSC ): -key org.openssl.engine:pkcs11:label_some-private-key OSSL_STORE_LOADER(3) "org.openssl.engine:" . PKCS#11 URI PKCS#11 RFC 7512 : -key pkcs11:object=some-private-key;pin-value=1234 (Provider Options) -provider name (Provider) name . name . . . <> OPENSSL_MODULES -provider-path . provider(7) . -provider-path path . OPENSSL_MODULES . -provparam [name:]key=value key value name () name . . . . UTF-8 . . -propquery propq (property query clause) . property(7) . (ENVIRONMENT) OpenSSL . OpenSSL OPENSSL_CONF OPENSSL_MODULES OPENSSL_TRACE openssl-env(7) . <> config(5) . openssl-engine(1) openssl-rehash(1) tsget(1) . (CPU) OPENSSL_armcap(3) OPENSSL_ia32cap(3) OPENSSL_ppccap(3) OPENSSL_s390xcap(3) OPENSSL_riscvcap(3) . (SEE ALSO) openssl-asn1parse(1), openssl-ca(1), openssl-ciphers(1), openssl-cms(1), openssl-crl(1), openssl-crl2pkcs7(1), openssl-dgst(1), openssl-dhparam(1), openssl-dsa(1), openssl-dsaparam(1), openssl-ec(1), openssl-ecparam(1), openssl-enc(1), openssl-engine(1), openssl-errstr(1), openssl-gendsa(1), openssl-genpkey(1), openssl-genrsa(1), openssl-kdf(1), openssl-list(1), openssl-mac(1), openssl-nseq(1), openssl-ocsp(1), openssl-passwd(1), openssl-pkcs12(1), openssl-pkcs7(1), openssl-pkcs8(1), openssl-pkey(1), openssl-pkeyparam(1), openssl-pkeyutl(1), openssl-prime(1), openssl-rand(1), openssl-rehash(1), openssl-req(1), openssl-rsa(1), openssl-rsautl(1), openssl-s_client(1), openssl-s_server(1), openssl-s_time(1), openssl-sess_id(1), openssl-smime(1), openssl-speed(1), openssl-spkac(1), openssl-srp(1), openssl-storeutl(1), openssl-ts(1), openssl-verify(1), openssl-version(1), openssl-x509(1), config(5), crypto(7), openssl-env(7). ssl(7), x509v3_config(5) (HISTORY) list -XXX-algorithms OpenSSL 1.0.0 . -issuer_checks OpenSSL 1.1.0 . -xcertform -xkeyform OpenSSL 3.0 . "openssl" OpenSSL 3.0 "openssl help" . (COPYRIGHT) 2000-2026 OpenSSL . . 2.0 (<<>>) . . LICENSE . 3.6.4 2026-08-25 OPENSSL(1)