diff options
Diffstat (limited to 'src/lib/libssl/src/doc/apps/rsautl.pod')
-rw-r--r-- | src/lib/libssl/src/doc/apps/rsautl.pod | 36 |
1 files changed, 18 insertions, 18 deletions
diff --git a/src/lib/libssl/src/doc/apps/rsautl.pod b/src/lib/libssl/src/doc/apps/rsautl.pod index 1a498c2f62..6b23cbcc56 100644 --- a/src/lib/libssl/src/doc/apps/rsautl.pod +++ b/src/lib/libssl/src/doc/apps/rsautl.pod | |||
@@ -47,11 +47,11 @@ the input key file, by default it should be an RSA private key. | |||
47 | 47 | ||
48 | =item B<-pubin> | 48 | =item B<-pubin> |
49 | 49 | ||
50 | the input file is an RSA public key. | 50 | the input file is an RSA public key. |
51 | 51 | ||
52 | =item B<-certin> | 52 | =item B<-certin> |
53 | 53 | ||
54 | the input is a certificate containing an RSA public key. | 54 | the input is a certificate containing an RSA public key. |
55 | 55 | ||
56 | =item B<-sign> | 56 | =item B<-sign> |
57 | 57 | ||
@@ -126,24 +126,24 @@ example in certs/pca-cert.pem . Running B<asn1parse> as follows yields: | |||
126 | 126 | ||
127 | openssl asn1parse -in pca-cert.pem | 127 | openssl asn1parse -in pca-cert.pem |
128 | 128 | ||
129 | 0:d=0 hl=4 l= 742 cons: SEQUENCE | 129 | 0:d=0 hl=4 l= 742 cons: SEQUENCE |
130 | 4:d=1 hl=4 l= 591 cons: SEQUENCE | 130 | 4:d=1 hl=4 l= 591 cons: SEQUENCE |
131 | 8:d=2 hl=2 l= 3 cons: cont [ 0 ] | 131 | 8:d=2 hl=2 l= 3 cons: cont [ 0 ] |
132 | 10:d=3 hl=2 l= 1 prim: INTEGER :02 | 132 | 10:d=3 hl=2 l= 1 prim: INTEGER :02 |
133 | 13:d=2 hl=2 l= 1 prim: INTEGER :00 | 133 | 13:d=2 hl=2 l= 1 prim: INTEGER :00 |
134 | 16:d=2 hl=2 l= 13 cons: SEQUENCE | 134 | 16:d=2 hl=2 l= 13 cons: SEQUENCE |
135 | 18:d=3 hl=2 l= 9 prim: OBJECT :md5WithRSAEncryption | 135 | 18:d=3 hl=2 l= 9 prim: OBJECT :md5WithRSAEncryption |
136 | 29:d=3 hl=2 l= 0 prim: NULL | 136 | 29:d=3 hl=2 l= 0 prim: NULL |
137 | 31:d=2 hl=2 l= 92 cons: SEQUENCE | 137 | 31:d=2 hl=2 l= 92 cons: SEQUENCE |
138 | 33:d=3 hl=2 l= 11 cons: SET | 138 | 33:d=3 hl=2 l= 11 cons: SET |
139 | 35:d=4 hl=2 l= 9 cons: SEQUENCE | 139 | 35:d=4 hl=2 l= 9 cons: SEQUENCE |
140 | 37:d=5 hl=2 l= 3 prim: OBJECT :countryName | 140 | 37:d=5 hl=2 l= 3 prim: OBJECT :countryName |
141 | 42:d=5 hl=2 l= 2 prim: PRINTABLESTRING :AU | 141 | 42:d=5 hl=2 l= 2 prim: PRINTABLESTRING :AU |
142 | .... | 142 | .... |
143 | 599:d=1 hl=2 l= 13 cons: SEQUENCE | 143 | 599:d=1 hl=2 l= 13 cons: SEQUENCE |
144 | 601:d=2 hl=2 l= 9 prim: OBJECT :md5WithRSAEncryption | 144 | 601:d=2 hl=2 l= 9 prim: OBJECT :md5WithRSAEncryption |
145 | 612:d=2 hl=2 l= 0 prim: NULL | 145 | 612:d=2 hl=2 l= 0 prim: NULL |
146 | 614:d=1 hl=3 l= 129 prim: BIT STRING | 146 | 614:d=1 hl=3 l= 129 prim: BIT STRING |
147 | 147 | ||
148 | 148 | ||
149 | The final BIT STRING contains the actual signature. It can be extracted with: | 149 | The final BIT STRING contains the actual signature. It can be extracted with: |
@@ -151,18 +151,18 @@ The final BIT STRING contains the actual signature. It can be extracted with: | |||
151 | openssl asn1parse -in pca-cert.pem -out sig -noout -strparse 614 | 151 | openssl asn1parse -in pca-cert.pem -out sig -noout -strparse 614 |
152 | 152 | ||
153 | The certificate public key can be extracted with: | 153 | The certificate public key can be extracted with: |
154 | 154 | ||
155 | openssl x509 -in test/testx509.pem -pubkey -noout >pubkey.pem | 155 | openssl x509 -in test/testx509.pem -pubkey -noout >pubkey.pem |
156 | 156 | ||
157 | The signature can be analysed with: | 157 | The signature can be analysed with: |
158 | 158 | ||
159 | openssl rsautl -in sig -verify -asn1parse -inkey pubkey.pem -pubin | 159 | openssl rsautl -in sig -verify -asn1parse -inkey pubkey.pem -pubin |
160 | 160 | ||
161 | 0:d=0 hl=2 l= 32 cons: SEQUENCE | 161 | 0:d=0 hl=2 l= 32 cons: SEQUENCE |
162 | 2:d=1 hl=2 l= 12 cons: SEQUENCE | 162 | 2:d=1 hl=2 l= 12 cons: SEQUENCE |
163 | 4:d=2 hl=2 l= 8 prim: OBJECT :md5 | 163 | 4:d=2 hl=2 l= 8 prim: OBJECT :md5 |
164 | 14:d=2 hl=2 l= 0 prim: NULL | 164 | 14:d=2 hl=2 l= 0 prim: NULL |
165 | 16:d=1 hl=2 l= 16 prim: OCTET STRING | 165 | 16:d=1 hl=2 l= 16 prim: OCTET STRING |
166 | 0000 - f3 46 9e aa 1a 4a 73 c9-37 ea 93 00 48 25 08 b5 .F...Js.7...H%.. | 166 | 0000 - f3 46 9e aa 1a 4a 73 c9-37 ea 93 00 48 25 08 b5 .F...Js.7...H%.. |
167 | 167 | ||
168 | This is the parsed version of an ASN1 DigestInfo structure. It can be seen that | 168 | This is the parsed version of an ASN1 DigestInfo structure. It can be seen that |