security_openssl_command_builder
Generate ready-to-use OpenSSL commands for key generation, CSR creation, self-signed certificates, encryption, hashing, and more without executing anything.
Instructions
OpenSSL Command Builder. Build a copy-paste-ready openssl command line from structured form fields, covering 12 operations: keygen (RSA/EC/Ed25519/Ed448 private key via genpkey), csr (PKCS#10 certificate signing request), self-signed (key plus self-signed X.509 cert in one step), sign (detached dgst -sign signature), encrypt (symmetric enc encrypt/decrypt), hash (file digest), pkcs12 (bundle key+cert into a .p12/.pfx), inspect (x509/req/pkey/pkcs12 -text), connect (s_client TLS probe), random (rand bytes), verify (chain verification), and s-server (local TLS test server). This tool only GENERATES the command text with per-flag explanations, weak/deprecated-choice warnings, and the files each command reads or writes - it NEVER executes openssl, opens sockets, or touches the filesystem. For Linux CLI commands (find/grep/sed/rsync/tar/curl/ssh) use linux_command_builder; for Apache rewrite/redirect rules use security_htaccess_generator. Runs locally on the options you provide: read-only, non-destructive, contact
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| operation | No | API action: build assembles a command from category+fields; categories returns the form-field catalogue; presets returns curated example field sets. Defaults to build. | build |
| category | No | Which openssl command to build (required when operation is build). keygen=private key, csr=signing request, self-signed=key+cert, sign=detached signature, encrypt=symmetric enc, hash=file digest, pkcs12=PFX bundle, inspect=read cert/key/CSR, connect=s_client probe, random=rand bytes, verify=chain check, s-server=test TLS server. | |
| fields | No | Per-category options; every key is optional and falls back to a sensible default. keygen/self-signed: algorithm (rsa-2048/rsa-3072/rsa-4096/ec/ed25519/ed448, default rsa-4096), curve (prime256v1/secp384r1/secp521r1/secp256k1), encryptKey/noEncrypt, cipher, outFile/keyOut/certOut, days (default 365). csr/self-signed subject DN: country, state, locality, organization, organizationalUnit, commonName, emailAddress; sans. csr/self-signed/sign/hash: digest (sha256/sha384/sha512/sha1/md5, default sha256), keyFile, inFile, sigFile. encrypt: mode (encrypt/decrypt), base64, pbkdf2 (default true), iter (default 100000), password. pkcs12: certFile, caFile, alias, password. inspect: what (cert/csr/key/p12), inFile. connect/s-server: host, sni, starttls, tlsVersion, ciphers, port (default 443 connect / 4433 s-server), showCerts/www. random: length (default 32), format (base64/hex), outFile. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| success | No | Whether the request succeeded. | |
| operation | No | The operation echoed back (build, categories, or presets). | |
| result | No | Operation payload. For build this is the command object below; for categories/presets it wraps a categories/presets array of form definitions. |