killchain-compendium/crypto/openssl/OpenSSL-Cheatsheet.md

# OpenSSL Cheatsheet

## Extract keys from PFX Cert

* Key and cert form PFX
```sh
openssl pkcs12 -in cert.pfx -nocerts -out key.pem -nodes
openssl pkcs12 -in cert.pfx -out cert.pem -clcerts -nokeys
```

## Extract & Repack PFX Cert

* Extract & Repack with another password, e.g. from `mimikatz` to `cqure`
```sh
openssl pkcs12 -in *.pfx -out temp.pem -nodes
openssl pkcs12 -export -out *.pfx -in temp.pem
```

## Generate Certificate

```sh
openssl req -new -x509 -keyout cert.pem -out cert.pem -days 365 -nodes
```