openssl (executable)

Standard commands

`asn1parse`	A diagnostic utility that to parse ASN.1 structures or to extract data from ASN.1 formatted data.
`ca`	Signs certificate requests and/or maintains a text database of issued certificates and their status.
`ciphers`
`cms`
`crl`
`crl2pkcs7`
`dgst`
`dhparam`
`dsa`
`dsaparam`
`ec`
`ecparam`
`enc`	Provides symmetric cypher routines (including base64!)
`engine`
`errstr`
`gendsa`	Generates a DSA private key, compare with `genpkey` and `gendsa`
`genpkey`	Generates a private key, compare with `genrsa` and `gendsa`
`genrsa`	Generates an RSA private key, compare with `genpkey` and `gendsa`. Apparently, `genrsa` should be considered a lecacy command which should not be used anymore.
`help`
`list`	Lists algorithms and features of the library.
`nseq`
`ocsp`
`passwd`
`pkcs12`
`pkcs7`
`pkcs8`
`pkey`
`pkeyparam`
`pkeyutl`
`prime`
`rand`	`openssl rand 5` creates 5 random bytes. `openssl rand -hex 5` prints them in hexadecimal representation.
`rehash`
`req`	Create and process certificate requests in PKCS#10 format.
`rsa`	Process RSA keys: convert between various forms, print their components out etc.
`rsautl`
`s_client`
`s_server`
`s_time`
`sess_id`
`smime`
`speed`	Test the performance of the library's cryptographic algorithms.
`spkac`
`srp`
`storeutl`
`ts`
`verify`
`version`
`x509`	Display, sign, convert certificates etc.

More details can be obtained with with the dgst command.

More details can be obtained with the enc command.

CA.pl is a Perl script that supplies the relevant command line arguments to the openssl command for some common certificate operations.