Task 1 Verify library hash - Look at https://www.openssl.org/source/openssl-1.1.1q.tar.gz - Download library and corresponding sha256 hash wget https://www.openssl.org/source/openssl-1.1.1q.tar.gz wget https://www.openssl.org/source/openssl-1.1.1q.tar.gz.sha256 - Compute hash sha256sum openssl-1.1.1q.tar.gz openssl dgst -sha256 openssl-1.1.1q.tar.gz - Verify integrity cat openssl-1.1.1q.tar.gz.sha256 Task 2 EC key-pair generation - Execute commands openssl genpkey -algorithm EC -outform PEM -pkeyopt ec_paramgen_curve:P-256 -pkeyopt ec_param_enc:named_curve -out ECpriv.pem openssl pkey -pubout -inform PEM -outform PEM -in ECpriv.pem -out ECpub.pem openssl pkey -pubin -pubout -inform PEM -outform DER -in ECpub.pem -out ECpub.der - check the content of ECpub.pem, ECpub.der, ECpriv.pem Task 3 RSA key-pair generation - Execute commands openssl genpkey -algorithm RSA -outform PEM -pkeyopt rsa_keygen_bits:2048 -pkeyopt rsa_keygen_pubexp:3 -out RSApriv.pem openssl pkey -pubout -inform PEM -outform PEM -in RSApriv.pem -out RSApub.pem openssl pkey -pubin -pubout -inform PEM -outform DER -in RSApub.pem -out RSApub.der - check the content of RSApub.pem, RSApub.der, RSApriv.pem Task 4 Key details - Execute commands openssl pkey -inform PEM -text -in ECpriv.pem openssl pkey -pubin -inform PEM -text -in ECpub.pem openssl pkey -inform PEM -text -in RSApriv.pem openssl pkey -pubin -inform PEM -text -in RSApub.pem openssl pkey -pubin -inform DER -text -in RSApub.der Task 5 DER parsing - Execute openssl asn1parse -inform DER -in RSApub.der - Replace ?? by appropriate offset to see modulus and exponent openssl asn1parse -inform DER -in RSApub.der -strparse ?? Task 6 Bonus - Check (and copy) one of the installed certificates cat /etc/ssl/certs/ISRG_Root_X1.pem cp /etc/ssl/certs/ISRG_Root_X1.pem ISRG_Root_X1.pem - Execute openssl x509 -inform PEM -in ISRG_Root_X1.pem -noout -text