
Description
Putting HTTPS on a site, signing a test certificate, generating an RSA key pair — nearly all of it runs on OpenSSL under the hood. It is both a cryptography library and a command-line tool implementing SSL and TLS, and it handles the whole lifecycle of certificates and keys from the terminal.
There is no official Windows installer; the usual route is a third-party prebuilt binary. Besides the new 4.1.0 you can pick the 3.6.5 LTS, in x86 or x64.
Cryptographic algorithms: AES, RSA, SHA and more for encrypting data in transit.
Certificate management: create self-signed certificates, request them from a CA and verify chains, each with its own command.
Key pair generation: generate RSA pairs so data encrypted at one end can only be read at the other, even if intercepted.
Forward secrecy: Perfect Forward Secrecy means one leaked session key does not expose past traffic.
Long-term support: the 3.x series has LTS releases under the Apache License, free for commercial use.
There is no official Windows installer; the usual route is a third-party prebuilt binary. Besides the new 4.1.0 you can pick the 3.6.5 LTS, in x86 or x64.
Features
Cryptographic algorithms: AES, RSA, SHA and more for encrypting data in transit.
Certificate management: create self-signed certificates, request them from a CA and verify chains, each with its own command.
Key pair generation: generate RSA pairs so data encrypted at one end can only be read at the other, even if intercepted.
Forward secrecy: Perfect Forward Secrecy means one leaked session key does not expose past traffic.
Long-term support: the 3.x series has LTS releases under the Apache License, free for commercial use.
