OpenSSL API Examples
Frank4DD<support[at]frank4dd.com>
Introduction
With OpenSSL's documentation being rather sparse,the following sample programs demonstrate various functions and enable "learning by doing". For additional programs, see also the "demo" directory within the OpenSSL source package.
List of Example Programs
| # | Name | Description |
|---|---|---|
| 1 | add_ev_oids.c | How to add extra/missing OID's to OpenSSL's internal NID table structure |
| 2 | certcreate.c | How to create a X509 digital certificate from a CSR request |
| 3 | certextensions.c | How to extract certificate extensions from a X509 digital certificate |
| 4 | certfprint.c | How to generate the fingerprint hash of a X509 digital certificate |
| 5 | certpubkey.c | How to extract public key data from a X509 digital certificate |
| 6 | certrenewal.c | How to create a new CSR request from a existing X509 digital certificate |
| 7 | certserial.c | How to extract the serial number from a X509 digital certificate |
| 8 | certsignature.c | How to extract the signature data from a X509 digital certificate |
| 9 | certstack.c | How to load a list of certificates, and display various subject data |
| 10 | certverify.c | How to validate a X509 certificate against a CA cert or chain |
| 11 | crldisplay.c | How to extract and display data from a certificate revocation list (CRL) |
| 12 | eckeycreate.c | How to create and display elliptic curve cryptography (ECC) key pairs |
| 12 | keytest.c | How to load and display a SSL private key using OpenSSL libraries |
| 13 | pkcs12test.c | How to create a PKCS12 cert bundle (e.g. for use with Windows S/MIME) |
| 14 | set_asn1_time.c | How to create/set the ASN1 date and time for X509 digital certificates |
| 15 | sslconnect.c | How to make a basic SSL/TLS connection and get the servers certificate |
| 16 | keycompare.c | How to check if a private key belongs to a X509 digital certificate |
Notes
All examples are written for OpenSSL on a Linux system. With small modificiations they are reported to work also under Windows and OSX.
See also http://fm4dd.com/openssl/