Automatically generated by Pod::Man 4.14 (Pod::Simple 3.42) Standard preamble: ========================================================================..
..
..
Set up some character translations and predefined strings. \*(-- will give an unbreakable dash, \*(PI will give pi, \*(L" will give a left double quote, and \*(R" will give a right double quote. \*(C+ will give a nicer C++. Capital omega is used to do unbreakable dashes and therefore won't be available. \*(C` and \*(C' expand to `' in nroff, nothing in troff, for use with C<>..tr \(*W-
. ds -- \(*W-
. ds PI pi
. if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch
. if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch
. ds L" ""
. ds R" ""
. ds C` ""
. ds C' ""
'br\}
. ds -- \|\(em\|
. ds PI \(*p
. ds L" ``
. ds R" ''
. ds C`
. ds C'
'br\}
Escape single quotes in literal strings from groff's Unicode transform. If the F register is >0, we'll generate index entries on stderr for titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index entries marked with X<> in POD. Of course, you'll have to process the output yourself in some meaningful fashion. Avoid warning from groff about undefined register 'F'...
.nr rF 0
. if \nF \{\
. de IX
. tm Index:\\$1\t\\n%\t"\\$2"
..
. if !\nF==2 \{\
. nr % 0
. nr F 2
. \}
. \}
.\}
.rr rF
Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2). Fear. Run. Save yourself. No user-serviceable parts.. \" fudge factors for nroff and troff
. ds #H 0
. ds #V .8m
. ds #F .3m
. ds #[ \f1
. ds #]
.\}
. ds #H ((1u-(\\\\n(.fu%2u))*.13m)
. ds #V .6m
. ds #F 0
. ds #[ \&
. ds #] \&
.\}
. \" simple accents for nroff and troff
. ds ' \&
. ds ` \&
. ds ^ \&
. ds , \&
. ds ~ ~
. ds /
.\}
. ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u"
. ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u'
. ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u'
. ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u'
. ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u'
. ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u'
.\}
. \" troff and (daisy-wheel) nroff accents
. \" corrections for vroff
. \" for low resolution devices (crt and lpr)
\{\
. ds : e
. ds 8 ss
. ds o a
. ds d- d\h'-1'\(ga
. ds D- D\h'-1'\(hy
. ds th \o'bp'
. ds Th \o'LP'
. ds ae ae
. ds Ae AE
.\}
======================================================================== Title "PKEY 1" PKEY 1 "2021-03-25" "1.1.1k" "OpenSSL"
For nroff, turn off justification. Always turn off hyphenation; it makes way too many mistakes in technical documents. "NAME"
openssl-pkey, pkey - public or private key processing tool
"SYNOPSIS"
Header "SYNOPSIS" \fBopenssl
pkey
[
-help]
[
-inform PEM|DER]
[
-outform PEM|DER]
[
-in filename]
[
-passin arg]
[
-out filename]
[
-passout arg]
[
-traditional]
[
-\f(BIcipher]
[-text]
[-text_pub]
[-noout]
[-pubin]
[-pubout]
[-engine id]
[-check]
[-pubcheck]
"DESCRIPTION"
Header "DESCRIPTION" The
pkey command processes public or private keys. They can be converted
between various forms and their components printed out.
"OPTIONS"
Header "OPTIONS" "-help" 4
Item "-help" Print out a usage message.
"-inform DER|PEM" 4
Item "-inform DER|PEM" This specifies the input format \s-1DER\s0 or \s-1PEM.\s0 The default format is \s-1PEM.\s0
"-outform DER|PEM" 4
Item "-outform DER|PEM" This specifies the output format, the options have the same meaning and default
as the
-inform option.
"-in filename" 4
Item "-in filename" This specifies the input filename to read a key from or standard input if this
option is not specified. If the key is encrypted a pass phrase will be
prompted for.
"-passin arg" 4
Item "-passin arg" The input file password source. For more information about the format of
arg
see \*(L"Pass Phrase Options\*(R" in
openssl\|(1).
"-out filename" 4
Item "-out filename" This specifies the output filename to write a key to or standard output if this
option is not specified. If any encryption options are set then a pass phrase
will be prompted for. The output filename should
not be the same as the input
filename.
"-passout password" 4
Item "-passout password" The output file password source. For more information about the format of
arg
see \*(L"Pass Phrase Options\*(R" in
openssl\|(1).
"-traditional" 4
Item "-traditional" Normally a private key is written using standard format: this is PKCS#8 form
with the appropriate encryption algorithm (if any). If the
-traditional
option is specified then the older \*(L"traditional\*(R" format is used instead.
"-\f(BIcipher" 4
Item "-cipher" These options encrypt the private key with the supplied cipher. Any algorithm
name accepted by
EVP_get_cipherbyname() is acceptable such as
des3.
"-text" 4
Item "-text" Prints out the various public or private key components in
plain text in addition to the encoded version.
"-text_pub" 4
Item "-text_pub" Print out only public key components even if a private key is being processed.
"-noout" 4
Item "-noout" Do not output the encoded version of the key.
"-pubin" 4
Item "-pubin" By default a private key is read from the input file: with this
option a public key is read instead.
"-pubout" 4
Item "-pubout" By default a private key is output: with this option a public
key will be output instead. This option is automatically set if
the input is a public key.
"-engine id" 4
Item "-engine id" Specifying an engine (by its unique
id string) will cause
pkey
to attempt to obtain a functional reference to the specified engine,
thus initialising it if needed. The engine will then be set as the default
for all available algorithms.
"-check" 4
Item "-check" This option checks the consistency of a key pair for both public and private
components.
"-pubcheck" 4
Item "-pubcheck" This option checks the correctness of either a public key or the public component
of a key pair.
"EXAMPLES"
Header "EXAMPLES" To remove the pass phrase on an \s-1RSA\s0 private key:
.Vb 1
openssl pkey -in key.pem -out keyout.pem
.Ve
To encrypt a private key using triple \s-1DES:\s0
.Vb 1
openssl pkey -in key.pem -des3 -out keyout.pem
.Ve
To convert a private key from \s-1PEM\s0 to \s-1DER\s0 format:
.Vb 1
openssl pkey -in key.pem -outform DER -out keyout.der
.Ve
To print out the components of a private key to standard output:
.Vb 1
openssl pkey -in key.pem -text -noout
.Ve
To print out the public components of a private key to standard output:
.Vb 1
openssl pkey -in key.pem -text_pub -noout
.Ve
To just output the public part of a private key:
.Vb 1
openssl pkey -in key.pem -pubout -out pubkey.pem
.Ve
"SEE ALSO"
Header "SEE ALSO" \fBgenpkey\|(1),
rsa\|(1),
pkcs8\|(1),
\fBdsa\|(1),
genrsa\|(1),
gendsa\|(1)
"COPYRIGHT"
Header "COPYRIGHT" Copyright 2006-2021 The OpenSSL Project Authors. All Rights Reserved.
Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use
this file except in compliance with the License. You can obtain a copy
in the file \s-1LICENSE\s0 in the source distribution or at
<https://www.openssl.org/source/license.html>.