I have just created a certificate for my Apache SSL host using:

make-ssl-cert /usr/share/ssl-cert/ssleay.cnf /etc/ssl/private/myhost.crt

Now what is the correct way to get the fingerprint out of it? (So I can keep it in other place for visual comparison---in case I need to connect and really don't trust the network?)

openssl sha1 /etc/ssl/private/myhost.crt

Returns a different SHA1 than what Opera tells me about the cert. Is this because it's combined with the key?

(...or am I spoofed already? :-)).

  • What do you get if you perform openssl x509 -in /etc/ssl/private/myhost.crt -sha1 -noout -fingerprint? Oct 16 '12 at 3:37
  • Your command openssl sha1 /etc/ssl/private/myhost.crt Dosn't work cos it computes the sha1 checksum of the whole certificate file, HeatfanJohn's answer is the right way to do it. Oct 27 '12 at 1:34

Try this command to determine the SHA1 fingerprint:

openssl x509 -in /etc/ssl/private/myhost.crt -sha1 -noout -fingerprint

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.