I have a question about how and what is the version of OpenSSl that I must install in Windows to later create certificates. Install a one version (openssl-1.0.2d-fips-2.0.10) found in SourceForge but it does not generate the files correctly. There is also the official website https://www.openssl.org, but I do not know how to install it and how, so that when it comes to generating the keys and .pem file, it works. Generate some environment variables that point to the folder where I unzipped the downloaded, I do not know if it is the correct way.


当前回答

这里有一个解决方案,可能会让那些已经实现了WSL (Windows Subsystem for Linux)的人感到高兴。你可以用:

WSL openssl…

关键是许多实现了WSL的人可能没有意识到他们可以通过这种方式从DOS或powershell命令行调用任何linux命令(在他们的底层WSL linux虚拟机中)。(人们很容易认为WSL的目的是用它来“shell到vm”,这确实是一个选项,但是从Windows运行linux命令的能力是WSL真正的增值。)

需要明确的是,在执行上面的命令时,您可能指向(或创建)的任何文件名或文件夹都将相对于您运行命令的Windows文件夹。例如,openssl req创建一个自签名证书,其中可以将-keyout命名为selfsigned。输入自签名。crt,这两个文件将被创建在运行命令的Windows文件夹中。

也就是说,对于一些openssl命令示例来说,这可能会失败,例如,如果他们试图使用各种特定于bash的参数,在这种情况下,“shell到wsl”来运行命令可能是更好的选择。您仍然可以直接在主机上找到或放置东西,但我并不是说这个答案过于关注WSL方面。我只是想把它作为安装openssl的另一种选择。

其他回答

你可以从这里获取https://slproweb.com/products/Win32OpenSSL.html

得到https://wiki.openssl.org/index.php/Binaries的支持和认可

将Git中的openssl设置为默认的openssl,并将其包含到环境变量的路径中(快速方法)

OR

从这里安装系统特定的openssl 链接。 设置如下变量:Set . Set OPENSSL_CONF = LOCATION_OF_SSL_INSTALL \ bin \ openssl.cfg 更新路径:set path =…其他值 在这里……;LOCATION_OF_SSL_INSTALL \ bin

如果您运行的是Windows 10 1709 (build 16299)或更高版本,则可以使用下面的winget命令安装OpenSSL

winget install -e --id ShiningLight.OpenSSL

或者如果你的系统上安装了Git for Windows,你也可以在Git文件目录中找到OpenSSL。

C:\Program Files\Git\usr\bin\openssl.exe

更多详细信息请参见本指南3 Windows系统上安装OpenSSL的方法。

Necroposting,但可能对其他人有用:

There's always the official page ([OpenSSL.Wiki]: Binaries) which contains useful URLs (pointing to unofficial resources / builds, make sure to read the Important Disclaimer) There are other repositories which contain unofficial builds Here I want to mention: [GitHub]: CristiFati/Prebuilt-Binaries - Prebuilt-Binaries/OpenSSL v1.0.2u (FIPS capable) is built with OpenSSL-FIPS 2.0.16 Artefacts are .zips that should be unpacked in "C:\Program Files" (please take a look at the Readme.md file, and also at the one at the repository root) Other 3rd-party software may bundle OpenSSL, so it gets "installed" as a side effect. Such software (mentioned by other answers): Cygwin, Git And of course you can build it yourself from sources, but that requires some deeper knowledge

注意:当你有一个功能性的OpenSSL实例时(使用上面的任何方法),下面是你如何从VStudio中使用它(如果你需要它到你自己的项目中):

检查openssl工具,这是一个来自LibreSSL项目和Cygwin库的openssl集合(2.5 MB)。NB !我们是包装商。

创建自签名证书的一行代码:

Openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout selfsigned。输出self - signed.crt