Openssl for windows x64 инструкция

Historically, utilizing OpenSSL necessitated either operating within a Linux environment or engaging in the manual compilation of its source code for both Mac and Windows users. However, with the advent of Win32/Win64 OpenSSL, this powerful open-source cryptography library has been made accessible to users of both 32-bit and 64-bit Windows operating systems, allowing for seamless integration into Windows environments through a straightforward installation process.OpenSSL is renowned for its pivotal role in securing data across a myriad of applications and network connections. It is instrumental in encrypting data for SSL/TLS protocols, thereby ensuring secure HTTPS connections, and is also utilized in the encryption processes for SSH, OpenVPN, and DNSSEC, among others.Thanks to the efforts of Shining Light Productions, the deployment of OpenSSL on Windows has been significantly simplified. The Win32/Win64 OpenSSL Installation Project, available at slproweb.com, offers an installer that streamlines the process, bypassing the complexity of manual compilation by providing ready-to-use binaries. This development not only facilitates easier access to OpenSSL’s robust security features but also enhances the security infrastructure of Windows-based systems with minimal effort.

Comprehensive Guide to Setting Up OpenSSL on Windows

Deploying OpenSSL on Windows 10 and Windows 11 has become more accessible, and this guide outlines two straightforward methods for installation. Begin with the most direct approach by leveraging the Windows Package Manager. To initiate this process, press the Windows-logo+R keys simultaneously to open the ‘Run’ dialogue box, type ‘cmd’, and select OK. Alternatively, you can press the Windows key, search for ‘cmd’, and then select the command prompt icon from the search results.Once you open the command prompt window, enter the following command to install OpenSSL. If your user account doesn’t have administrative privileges, right-click on the command prompt and choose “Run as administrator” for elevated access.<“C:\> winget install openssl”>The command line tool ‘winget’ serves as a versatile package manager for Windows, simplifying the installation of software applications and packages directly from the command line interface. When you run 'winget‘ for the first time, it may ask you to accept the terms of the source agreement. You can do this by pressing the ‘Y’ key when prompted.

This method showcases the simplicity and efficiency of using 'winget' for software installations on Windows platforms, streamlining the process of getting OpenSSL up and running on your system without the need for intricate steps or manual downloads.The OpenSSL package is now installed. The second method is to download and install the package.

Step-by-Step Guide to Downloading and Installing Win64 OpenSSL

Locate the Installer: Visit the official Shining Light Productions website at https://slproweb.com/products/Win32OpenSSL.html to find the installer. It’s advisable to opt for the most recent version to ensure you have the latest security and functionality enhancements. As of the last update to this guide, the Win64 OpenSSL v3.0.7 EXE Light version is recommended for its balance of features and lightweight installation.Initiate the Installation Process: Search for the “Win64 OpenSSL v3.0.7 EXE Light” option, which should be prominently displayed at the top of the list. Download this file and, once the download is complete, navigate to your download directory and double-click the Win64OpenSSL_Light-3_0_7.exe file to start the setup process.Navigate the Setup Wizard: Upon launching the installer, you may encounter a User Account Control (UAC) prompt. Click 'Yes' to affirm your decision to proceed with the installation. This action will activate the setup wizard, which will guide you through the necessary steps to successfully install OpenSSL on your Windows system. The wizard automates the process of unpacking and transferring the necessary OpenSSL files to their designated locations on your computer.

Integrating OpenSSL into the Windows Environment

Access System Properties: Begin by opening the Run dialog box using the Windows + R shortcut, then type SYSTEM PROPERTIES ADVANCED and click OK to proceed.Navigate to Environment Variables: In the System Properties window that appears,locate and click on the ‘Environment Variables’ button situated at the lower section of the window.Modify the System Path: Within the Environment Variables window, scroll to find the ‘Path’ variable under the ‘System Variables’ section. Select it and then click the ‘Edit’ button. This action opens the ‘Edit Environment Variable’ window, where you will add the path to the OpenSSL installation.

Specifically, you’re aiming to include the path to the OpenSSL-Win64\bin directory, which is typically located within the Program Files directory. This path houses the openssl.exe executable. Utilize the Browse button or directly paste the path if you have it ready. Confirm by clicking OK.Add OPENSSL_CONF Variable: For OpenSSL to function correctly, it needs to know where to find its configuration file. Achieve this by adding a new system variable. Click ‘New’ within the System Variables section and enter OPENSSL_CONF as the variable name. In the variable value field, input the path to your openssl.cnf file, which is usually located at C:\Program Files\OpenSSL-Win64\bin\cnf\openssl.cnf. Confirm all actions by clicking OK.

Verifying the Installation

To confirm that OpenSSL has been correctly set up and is operational, open a command prompt window and execute the following commands:To check the version and build information of your OpenSSL installation, enter:“C:\> openssl version -a”This command will display details such as the version number and build date.To ascertain the directory where OpenSSL searches for its configuration files, use:“C:\> openssl version -d”This returns the OPENSSLDIR path, indicating where the OpenSSL configuration files reside.Utilizing OpenSSL on WindowsWhile Windows does not support the ‘man’ pages common on Linux for detailed command documentation, OpenSSL on Windows provides a helpful alternative. The openssl help command offers context-sensitive guidance for using its various functions. For example, you can use openssl help s_client, openssl help x509, or openssl help req to get specific information on these commands. Additionally, extensive documentation and manual pages are available online, offering a wealth of information to both new and experienced users.

Mastering OpenSSL: Key Commands and Operations

OpenSSL is an incredibly robust toolkit that offers an array of functionalities for managing and manipulating SSL/TLS certificates, keys, and other cryptographic tasks. Below, we explore several essential OpenSSL commands that are widely used for security and certificate management. This list is not exhaustive but highlights some practical examples of how OpenSSL can be utilized effectively.

Essential OpenSSL Commands for Security Experts

– Inspecting Certificate Details: To examine the details of a certificate file named `ca-cert.pem` without altering its content, use the following command:openssl x509 -noout -text -in ca-cert.pemThis command outputs the certificate’s details in a readable format, making it easier to review its contents.– Verifying Certificate Signing Requests (CSRs): For scrutinizing and confirming the data within a CSR file named `x509-check.csr`, execute:openssl req -text -noout -verify -in x509-check.csrThis ensures the integrity and correctness of the CSR’s information.– Checking Key File Integrity: To verify the structural integrity of a key file, such as `rootCA.key`, use:openssl rsa -check -in rootCA.keyThis command helps ensure that the key file is valid and has not been corrupted.– Computing Certificate Checksum: To calculate the MD5 checksum of a certificate file `ca-cert.pem`, facilitating the verification of its integrity, perform:openssl x509 -noout -modulus -in ca-cert.pem | openssl md5– Converting Certificate Formats: To transform a PEM format certificate `servercert.pem` into a PKCS#7 format and save it as `servercert.p7b` in a temporary directory, execute:openssl crl2pkcs7 -nocrl -certfile servercert.pem -out c:\temp\servercert.p7b– Exporting to PKCS#12 Format: To convert a certificate `rootCA.pem` and its key `rootCA.key` into a PKCS#12 format file named `rootCA.p12`, use:openssl pkcs12 -export -in rootCA.pem -inkey rootCA.key -out c:\temp\rootCA.p12 -name "PKCS12 certificate"– Generating SSL Certificates: For creating a new SSL certificate and key with RSA 2048 encryption and SHA256 hashing, valid for one year, the command is:openssl req -new -newkey rsa:2048 -sha256 -days 365 -nodes -x509 -keyout server.key -out server.crt– Testing Server Connections: To check the connection to an IMAP service on `imap.gmail.com` at port 993, use:openssl s_client -connect imap.gmail.com:993For SMTP with STARTTLS on `smtp.gmail.com` at port 587, the command is:openssl s_client -crlf -connect smtp.gmail.com:587 -starttls smtpAnd to verify the connection details of `www.ietf.org` at port 443 quietly and briefly:openssl s_client -verify_quiet -brief www.ietf.org:443– Generating Random Passwords: To create a secure random password in base64 format, which could be used to safeguard private keys, execute:openssl rand -base64 20These commands represent just a fraction of what OpenSSL can accomplish. Its versatility extends far beyond these examples, serving as a critical tool for anyone working with encryption, certificates, and secure communications.

Tutorial: OpenSSL provision on Windows 10 and Windows 11

OpenSSL was previously reserved for Linux operating systems or had to be compiled from the source code itself under Mac and Windows. With Win32/Win64 OpenSSL, the open source software library can also be run on 32-bit and 64-bit Windows OS (x86/i386) and can be integrated on Windows machines via installer.

OpenSSL is widely used and found by encryption in numerous application and secure connections, as well as for SSL/TLS connections HTTPS, including cryptography in SSH, OpenVPN and DNSSEC.

The Win32/Win64 OpenSSL installation project from Shining Light Productions (slproweb.com) carrying the ease of deployment of OpenSSL for Microsoft Windows. The installation consists of downloading and unpacking the binaries, which eliminates the need to compile source code.

Installation

This tutorial shows two methods to deploy OpenSSL on Windows 10 and Windows 11. The simple method right at the beginning, by running Windows Package Manager with hit the Windows-logo+R keys and enter cmd in the Run box then click OK, or press and hit cmd then click the command prompt icon.

Click Start
and hit cmd

Картинка с сайта: think.unblog.ch

In the now opened command prompt ran the following command, if you are not authorized as administrator with the logged in user, you can select “Run as administrator”.

C:\> winget install openssl

The Windows package manager “winget” allows you to install applications and other packages by using the command line. If winget is started for the first time, you will be prompted to confirm the source agreement terms, by hit the Y key.

Картинка с сайта: think.unblog.ch

The OpenSSL package is now installed. The second method is to download and install the package.

Install Win64 OpenSSL package manually

The table (screenshot) on the slproweb.com website contains the versions for Win32 and Win64 OpenSSL as EXE and MSI installers.

Картинка с сайта: think.unblog.ch

Recommended here is the latest version with the most commonly used essentials of Win64 OpenSSL v3.0.7, at the time of writing this article, it is Win64 OpenSSL v3.0.7 EXE Light, at the top of the first line.

Double-click to execute the file Win64OpenSSL_Light-3_0_7.exe will the setup wizard appears. Confirm the Windows Account Control (UAC) with Yes to continue the installation.

Картинка с сайта: think.unblog.ch

The setup wizard unpacks and copies the OpenSSL files.

Картинка с сайта: think.unblog.ch

Set up the OpenSSL environment

After the OpenSSL files are copied and installed, the search path and environment variable are now added to the operating system, with + R and paste SYSTEMPROPERTIESADVANCED and click OK.

Картинка с сайта: think.unblog.ch

The System Properties window opens.

Картинка с сайта: think.unblog.ch

Click the Environment Variables button at the bottom.

Картинка с сайта: think.unblog.ch

In the lower area System Variables, select the Path line with the mouse and click on the Edit button.

Картинка с сайта: think.unblog.ch

In the “Edit Environment Variables” window, click New to add the path to the OpenSSL-Win64\bin folder under Program files. The path in which the file openssl.exe is located can be found with Windows Explorer and copied to the clipboard, there is also the possibility to choose the path to the bin folder with the Browse button. Confirm the action with OK.

Now add another system variable with click New.

Картинка с сайта: think.unblog.ch

Enter OPENSSL_CONF in the Variable name field. In the next field insert the path to which the file openssl.cnf is located, here it is C:\Program Files\OpenSSL-Win64\bin\cnf\openssl.cnf

The installation is now complete and OpenSSL can be used. First of all, there is the opportunity to check the OpenSSL provisioned release.

C:\> openssl version -a
OpenSSL 3.0.7 1 Nov 2022 (Library: OpenSSL 3.0.7 1 Nov 2022)
built on: Tue Nov  1 16:04:12 2022 UTC
...
C:\> openssl version -d
OPENSSLDIR: "C:\Program Files\Common Files\SSL"

The OpenSSL Toolkit is a versatile utility with many options, but under Windows there is not the possibility of using the man page, as is known on Linux. However, the openssl help command provides context-sensitive help, such asopenssl help s_clientor useopenssl help x509oropenssl help reqto show just a few examples. Help is also offered on the documentation pages on the web, where manpages can also be found.

Useful OpenSSL Examples

A few of the most commonly used openssl command examples in the console are shown below, note that this is not a comprehensive collection of all possible applicable commands of this powerful open source toolkit.

openssl x509 -noout -text -in ca-cert.pem

Displaying and print the ca-cert.pem certificate file in plain text.

openssl req -text -noout -verify -in x509-check.csr

View and verify the contents of CSR x509-check.csr in plain text.

openssl rsa -check -in rootCA.key

Verify key consistency of the rootCA.key file.

openssl x509 -noout -modulus -in ca-cert.pem | openssl md5

Check md5 checksum of certificate ca-cert.pem file.

openssl crl2pkcs7 -nocrl -certfile servercert.pem -out c:\temp\servercert.p7b

Convert certificate from pem to p7b format and write to temp folder.

openssl pkcs12 -export -in rootCA.pem -inkey rootCA.key -out c:\temp\rootCA.p12 -name "PKCS12 certificate"

Convert certificate rootCA.pem to PKCS12 format as rootCA.p12 file.

openssl req -new -newkey rsa:2048 -sha256 -days 365 -nodes -x509 -keyout server.key -out server.crt

Generate SSL certificate and key on a single line, using SHA256 with RSA 2048 encryption, the certificate will be valid for 1 year.

openssl s_client -connect imap.gmail.com:993

Check connection to imap.gmail.com service 993 to get more useful results like than as in telnet.

openssl s_client -crlf -connect smtp.gmail.com:587 -starttls smtp

Try to connect service 587 on smtp.gmail.com using the starttls protocol, possibly to check a firewall policy for its effect.

openssl s_client -verify_quiet -brief www.ietf.org:443

Check protocol version and ciphersuite, peer certificate and hash used.

openssl rand -base64 20

Generate a random password in base64 using OpenSSL, can be used as a passphrase to hide private keys from spying eyes.

These were just a few examples, because openssl is a versatile toolkit that offers numerous application options.

Conclusion

The OpenSSL open-source library for cryptography is more important than ever and indispensable. Connections are encrypted and protected, so why shouldn’t the OpenSSL Toolkit be used on Windows? Creating and managing Digital X. 509 certificates, check algorithms for data encryption such as Chiper Suite, digital fingerprint, MD5 and SHA hash values can be checked, which was previously reserved only for Linux.

Sources Links:
slproweb.com Win32/Win64 OpenSSL Installation Project for Windows
openssl.org Cryptography and SSL/TLS Toolkit