openssl-cli

Manage SSL/TLS certificates, private keys, and CSRs with OpenSSL.

6|1|Updated Feb 16, 2026
One-click install
npx skills add https://github.com/L3DigitalNet/Claude-Code-Plugins --skill openssl-cli
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: openssl-cli
Source: https://github.com/L3DigitalNet/Claude-Code-Plugins/tree/main/plugins/linux-sysadmin/skills/openssl-cli
Command: npx skills add https://github.com/L3DigitalNet/Claude-Code-Plugins --skill openssl-cli

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill simplifies complex OpenSSL command-line operations for managing digital certificates, private keys, and TLS connections, making certificate management accessible.

Core Features & Use Cases

  • Certificate Inspection: Analyze certificate details, expiry dates, and chains.
  • Key Generation: Create RSA and EC private keys.
  • CSR Creation: Generate Certificate Signing Requests.
  • Self-Signed Certificates: Quickly generate self-signed certificates for testing.
  • Format Conversion: Convert between PEM, DER, and PKCS12 formats.
  • Live Server Checks: Verify certificates and TLS configurations of live servers.
  • Use Case: You need to check the expiry date of a website's SSL certificate or generate a self-signed certificate for a development server.

Quick Start

Use the openssl-cli skill to inspect the certificate file named 'mycert.pem'.

Frequently Asked Questions about openssl-cli

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate a self-signed SSL certificate for a development server?

To generate a self-signed SSL certificate, you create a private key and pair it with certificate details in a single command. This Skill simplifies that process, producing a certificate suitable for testing environments.

How do I check the expiry date of an SSL certificate?

You can inspect an SSL certificate by providing the certificate file to the Skill. It analyzes the certificate details and returns the exact expiry date and chain information for your domain.

What is the best way to convert between PEM, DER, and PKCS12 certificate formats?

Converting between PEM, DER, and PKCS12 formats is handled by the format conversion feature. You specify the source file and target format, and the Skill outputs the converted certificate file.

How do I create a Certificate Signing Request and private key using OpenSSL?

Creating a Certificate Signing Request (CSR) involves generating a private key and embedding your domain details. This Skill guides CSR creation to produce the files needed for a certificate authority.

Can I verify the TLS configuration of a live server with OpenSSL?

Yes, you can verify a live server's TLS configuration by running a live server check. The Skill connects to the server and inspects the presented certificates and TLS setup.

Do I need OpenSSL installed to generate RSA or EC private keys?

Yes, generating RSA and EC private keys requires an OpenSSL environment. This Skill provides a comprehensive interface to those underlying OpenSSL commands for key generation.