Difference between revisions of "Openssl s client"
Jump to navigation
Jump to search
↑ https://serverfault.com/questions/139728/how-to-download-the-ssl-certificate-from-a-website
| Line 14: | Line 14: | ||
openssl s_client -servername <NAME> -connect <HOST:PORT> 2>/dev/null | [[openssl x509]] -noout -dates | openssl s_client -servername <NAME> -connect <HOST:PORT> 2>/dev/null | [[openssl x509]] -noout -dates | ||
| + | |||
| + | |||
| + | == Activities == | ||
| + | * [[How to check certification expiration date from command line]] | ||
== Related terms == | == Related terms == | ||
Revision as of 08:12, 12 September 2023
openssl s_client -showcerts -connect YOUR_DOMAIN.COM:443
echo -n | openssl s_client -connect HOST:PORTNUMBER | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > /tmp/$SERVERNAME.cert[1]
depth=0 C = XX, ST = YY, L = XXXXX, O = ORGA, OU = RND, CN = YOUR_DOMAIN.COM verify error:num=20:unable to get local issuer certificate verify return:1 depth=0 C = XX, ST = YY, L = XXXXX, O = ORGA, OU = RND, CN = YOUR_DOMAIN.COM verify error:num=21:unable to verify the first certificate verify return:1 DONE
openssl s_client -servername <NAME> -connect <HOST:PORT> 2>/dev/null | openssl x509 -noout -dates
Activities
Related terms
See also
openssl[rand | s_client | passwd|openssl req|openssl rsa|openssl genrsa|openssl x509|openssl ca|openssl verify|openssl ec|openssl dgst|openssl pkcs12|openssl asn1parse|openssl help|.cer to .pem, openssl version- OpenSSL: RSA, ECDSA, WolfSSL, AES, Diffie-Hellman (DH) key-exchange,
/etc/ssl/openssl.cnf, OpenSSL v3
Advertising:
