Generate Ed25519 key openssl
Modern: Ed25519 keys are tiny and fast vs RSA; use for signing/mTLS
openssl genpkey -algorithm ed25519 -out ed25519.pem
more openssl
all 27 commands →
Test specific TLS protocol
openssl s_client -connect <host>:443 -tls1_2 </dev/null 2>&1 | grep -E 'Protocol|Cipher'
Generate RSA private key
openssl genrsa -out private.key 4096
Generate Ed25519 key pair
openssl genpkey -algorithm ed25519 -out private.key && openssl pkey -in private.key -pubout -out public.key
Create CSR
openssl req -new -key private.key -out request.csr -subj '/CN=example.com/O=MyOrg/C=RU'
Self-signed certificate
openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365 -nodes -subj '/CN=localhost'