如何验证public key和private key

1. 读取public key证书的内容

$ openssl x509 -text -noout -in cert.pem

2. 如何验证验证public key和private key是否匹配

$ openssl pkey -pubout -outform pem -in privateKey.pem | sha256sum
$ openssl x509 -pubkey -noout -outform pem -in publicKey.pem | sha256sum

两者产出同样的输出。

3. 如何用CA验证public key证书

$ openssl verify -verbose -CAfile cacert.pem  publickey.pem