Difference between revisions of "Openssl s client"
Jump to navigation
Jump to search
↑ https://serverfault.com/questions/139728/how-to-download-the-ssl-certificate-from-a-website
Line 3: | Line 3: | ||
* <code>echo -n | openssl s_client -connect HOST:PORTNUMBER | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > /tmp/$SERVERNAME.cert</code> <ref>https://serverfault.com/questions/139728/how-to-download-the-ssl-certificate-from-a-website</ref> | * <code>echo -n | openssl s_client -connect HOST:PORTNUMBER | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > /tmp/$SERVERNAME.cert</code> <ref>https://serverfault.com/questions/139728/how-to-download-the-ssl-certificate-from-a-website</ref> | ||
+ | depth=0 C = XX, ST = YY, L = XXXXX, O = ORGA, OU = RND, CN = YOUR_DOMAIN.COM | ||
+ | verify error:num=20:unable to get local issuer certificate | ||
+ | verify return:1 | ||
+ | depth=0 C = XX, ST = YY, L = XXXXX, O = ORGA, OU = RND, CN = YOUR_DOMAIN.COM | ||
+ | verify error:num=21:unable to verify the first certificate | ||
+ | verify return:1 | ||
+ | DONE | ||
== See also == | == See also == |
Revision as of 07:10, 6 October 2020
openssl s_client -showcerts -connect YOUR_DOMAIN.COM:443
echo -n | openssl s_client -connect HOST:PORTNUMBER | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > /tmp/$SERVERNAME.cert
[1]
depth=0 C = XX, ST = YY, L = XXXXX, O = ORGA, OU = RND, CN = YOUR_DOMAIN.COM verify error:num=20:unable to get local issuer certificate verify return:1 depth=0 C = XX, ST = YY, L = XXXXX, O = ORGA, OU = RND, CN = YOUR_DOMAIN.COM verify error:num=21:unable to verify the first certificate verify return:1 DONE
See also
openssl
[rand | s_client | passwd
|openssl req
|openssl rsa
|openssl genrsa
|openssl x509
|openssl ca
|openssl verify
|openssl ec
|openssl dgst
|openssl pkcs12
|openssl asn1parse
|openssl help
|.cer to .pem, openssl version
- OpenSSL: RSA, ECDSA, WolfSSL, AES, Diffie-Hellman (DH) key-exchange,
/etc/ssl/openssl.cnf
, OpenSSL v3
Advertising: