OpenSSL command cheat sheet — sslx equivalents

[thegdsks]

Quick reference for switching from OpenSSL to sslx:

Task	OpenSSL	sslx
Inspect cert	openssl x509 -in cert.pem -text -noout	sslx inspect cert.pem
TLS handshake	openssl s_client -connect host:443	sslx connect host
Verify chain	openssl verify -CAfile ca.pem cert.pem	sslx verify cert.pem --ca ca.pem
Generate cert	openssl req -x509 -newkey ec...	sslx generate --cn localhost
Create CSR	openssl req -new -newkey ec...	sslx csr --cn example.com
PEM to DER	openssl x509 -outform DER...	sslx convert cert.pem --to der
Check expiry	openssl s_client ... | openssl x509 -enddate	sslx expiry host1 host2
Match cert+key	diff <(openssl x509 -modulus...) <(openssl rsa -modulus...)	sslx match cert.pem key.pem
TLS grade	(SSL Labs website)	sslx grade example.com
Decode JWT	(jwt.io website)	sslx decode <token>

All commands support --json for scripting.