Hacker News Reader

> Historically, the OpenSSL command line tools have been intended for

> debugging only.

That very much surprises me. Can someone explain, elaborate, or source this idea?

Have you used the openssl cli tools before?

Haha, yes, extensively. Should I not have?

I wouldn't say so, you can probably use the tool to your hearts content.

Obviously the tools are useful for debugging purposes, testing tls connections, dumping cert information and asn1.

I've now been made aware that tools wrap the openssl cli instead of using it's programmatic API.

Once I tried to use the ca functions of the tool, found the whole tool entirely too cumbersome and wrote my own using libopenssl.

What do you use it for extensively if I might ask?

I personally use it for generating CSRs and private keys.

Yeah, quite successfully actually.