Forrest logo
back to the openssl tool

openssl-dgst:tldr:4f448

openssl-dgst: Sign a file using an RSA key, saving the result to a specific file.
$ openssl dgst -sign ${private_key_file} -sha256 -sigopt rsa_padding_mode:pss -out ${output_file} ${input_file}
try on your machine

This command uses the OpenSSL tool for cryptographic operations to create a digital signature for a given input file using the specified private key file.

Here is a breakdown of the command:

  • openssl: This is the command to invoke the OpenSSL tool.
  • dgst: This is the command for message digest operations, which includes generating digital signatures.
  • -sign ${private_key_file}: Specifies the private key file to use for signing the hash. ${private_key_file} should be replaced with the path to the actual private key file.
  • -sha256: Specifies the hash function to use, in this case, SHA-256. The input file will be hashed using this algorithm before signing.
  • -sigopt rsa_padding_mode:pss: Specifies the signature options. Here, it configures the RSA padding mode as PSS (Probabilistic Signature Scheme), which is a more secure padding scheme.
  • -out ${output_file}: Specifies the output file where the digital signature will be saved. ${output_file} should be replaced with the desired path and filename.
  • ${input_file}: Specifies the input file for which the digital signature will be created. ${input_file} should be replaced with the path to the actual input file.

When executed, this command will create a digital signature by hashing the input file using SHA-256, signing the hash using the private key file, and then saving the signature to the specified output file.

This explanation was created by an AI. In most cases those are correct. But please always be careful and never run a command you are not sure if it is safe.
back to the openssl tool