openssl-configutl(1ssl)

openssl-configutl1ssl

Openssl configuration file helper command

Usage

openssl configutl [-help] [-config filename] [-out filename] [-noheader]

Overview

Real world openssl configuration files with use of the .include directive are quite complex, and there is a need to see the resulting system-wide configuration.

This tool is designed for managing OpenSSL configuration files. Currently it processes a configuration file with possibly complex structure and dumps an effective resulting configuration file, to stdout by default.

Options

-help

Print out a usage message.

-config filename

The configuration file to deal with. If omitted, the compiled one or the one defined via the OPENSSL_CONF environment variable is used.

-out filename

The output file to be used instead of stdout.

-noheader

Don't print information about the original config file to be processed.

Examples

Dump the configuration file my.conf processing all .include directives to the file result.conf

 openssl configutl -config my.conf -out result.conf

History

The configutl command was added in OpenSSL 3.6.

From openssl 3.6.5-1 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.