Pasted

# Create a private/public key pair (4096 bits RSA)
openssl genrsa -out key.pem 4096
 
# Check the private key
openssl rsa -check -noout -in key.pem
 
# Print the private key data
openssl rsa -text -noout -in key.pem
 
# Extract the public key
openssl rsa -in key.pem -pubout > public.pem
 
# Print the public key data
openssl pkey -inform PEM -pubin -text -noout -in public.pem
 
# Sign the file sample.txt
openssl dgst -sha256 -sign key.pem -out sample.txt.sig.sha256 sample.txt
 
# Verify the signature of file sample.txt
openssl dgst -sha256 -verify public.pem -signature sample.txt.sig.sha256 sample.txt
 
 
# You need a public key only file for the verification. If you have the certificate for the verification you
# can extract the public key from the certificate file
openssl x509 -in key.crt -pubkey -noout >public.pem