OPENSSL-CONFIGUTL(1ossl) OpenSSL OPENSSL-CONFIGUTL(1ossl)

# [NAME](#NAME)

openssl-configutl - openssl configuration file helper command

# [SYNOPSIS](#SYNOPSIS)

**openssl** **configutl** \[**-help**] \[**-config** *filename*] \[**-out** *filename*] \[**-noheader**]

# [DESCRIPTION](#DESCRIPTION)

Real world openssl configuration files with use of the **.include** directive are quite complex, and there is a need to see the resulting system-wide configuration.

This tool is designed for managing OpenSSL configuration files. Currently it processes a configuration file with possibly complex structure and dumps an effective resulting configuration file, to stdout by default.

# [OPTIONS](#OPTIONS)

[**-help**](#help)

Print out a usage message.

[**-config** *filename*](#config)

The configuration file to deal with. If omitted, the compiled one or the one defined via the **OPENSSL\_CONF** environment variable is used.

[**-out** *filename*](#out)

The output file to be used instead of stdout.

[**-noheader**](#noheader)

Don't print information about the original config file to be processed.

# [EXAMPLES](#EXAMPLES)

Dump the configuration file *my.conf* processing all **.include** directives to the file **result.conf**

```
 openssl configutl -config my.conf -out result.conf
```

# [SEE ALSO](#SEE_ALSO)

[**config**(5)](/man/os/openssl-4.0/config.5)

# [HISTORY](#HISTORY)

The **configutl** command was added in OpenSSL 3.6.

# [COPYRIGHT](#COPYRIGHT)

Copyright 2025-2026 The OpenSSL Project Authors. All Rights Reserved.

Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <https://www.openssl.org/source/license.html>.

2026-09-29 4.0.3

---

Document: openssl-configutl(1ossl) from openssl-4.0 4.0.3-r1 (Chainguard OS)