Protocols >> SSL >> Tools >> OpenSSL >> How to use openssl command


## (1) Filter ciphers by Key Exchange Type 

[root@rhel7client1 ssl]# openssl ciphers -v 'kEDH+aRSA+AES' | column -t
DHE-RSA-AES256-GCM-SHA384  TLSv1.2  Kx=DH  Au=RSA  Enc=AESGCM(256)  Mac=AEAD
DHE-RSA-AES256-SHA256      TLSv1.2  Kx=DH  Au=RSA  Enc=AES(256)     Mac=SHA256
DHE-RSA-AES256-SHA         SSLv3    Kx=DH  Au=RSA  Enc=AES(256)     Mac=SHA1
DHE-RSA-AES128-GCM-SHA256  TLSv1.2  Kx=DH  Au=RSA  Enc=AESGCM(128)  Mac=AEAD
DHE-RSA-AES128-SHA256      TLSv1.2  Kx=DH  Au=RSA  Enc=AES(128)     Mac=SHA256
DHE-RSA-AES128-SHA         SSLv3    Kx=DH  Au=RSA  Enc=AES(128)     Mac=SHA1      


## (2) Display Certificate information (e.g. Common Name, Expiry etc) from Certificate file in PEM format  

[root@mail certs]# openssl x509 -in your-certificate-file.crt -text