Encrypt file with AES-256

Password-encrypt a file with AES-256-CBC + PBKDF2

openssl enc -aes-256-cbc -pbkdf2 -in secret.txt -out secret.enc
tool
openssl27 commands
tags
opensslsecurity

More openssl commands

  • Decrypt AES-256 file
    openssl enc -d -aes-256-cbc -pbkdf2 -in secret.enc -out secret.txt

    Decrypt a file encrypted with the enc command above

  • Generate random hex token
    openssl rand -hex 32

    Generate a 64-char hex random string (e.g. for API keys)

  • Full certificate inspect
    openssl x509 -in cert.pem -noout -text

    Dump all cert fields: subject, issuer, validity, extensions, SANs, key usage

  • Cert expiry check (CI gate)
    openssl x509 -in cert.pem -noout -checkend 86400 && echo OK || echo EXPIRING

    Exit 0 if cert valid >24h; perfect for monitoring/CI alerts on expiry

  • Inspect live server chain
    openssl s_client -connect <host>:443 -servername <host> -showcerts </dev/null 2>/dev/null

    Fetch full chain with SNI; -servername is mandatory for vhosts/SNI backends

all 27 openssl commands