☰

Update ssl-debug.md

David Stark committed 2020-07-10 10:06:19 +0100 commit c5178c717b102b2a77fc814d9fee227a253698c5

				compute/ssl-debug.md
			
          @@ -10,9 +10,11 @@

           `$ echo | openssl s_client -showcerts -servername <hostname> -connect <hostname>:443`

           ### Dump cert chain to individual files

          -`$ echo | openssl s_client -showcerts -servername <hostname> -connect <hostname>:443 | \

          +```

          +$ echo | openssl s_client -showcerts -servername <hostname> -connect <hostname>:443 | \

           sed -n '/-----BEGIN CERTIFICATE-----/,/-----END CERTIFICATE-----/p'  | \

          -awk 'BEGIN {i=0} /BEGIN CERT/{i++} { print > "cert" i ".pem"}'`

          +awk 'BEGIN {i=0} /BEGIN CERT/{i++} { print > "cert" i ".pem"}'

          +```

           ### Read CRL

           `$ openssl crl -inform {DER|PEM} -noout -text -in <crl file>`

...	...	@@ -10,9 +10,11 @@
10	10	`$ echo \| openssl s_client -showcerts -servername <hostname> -connect <hostname>:443`
11	11
12	12	### Dump cert chain to individual files
13		-`$ echo \| openssl s_client -showcerts -servername <hostname> -connect <hostname>:443 \| \
	13	+```
	14	+$ echo \| openssl s_client -showcerts -servername <hostname> -connect <hostname>:443 \| \
14	15	sed -n '/-----BEGIN CERTIFICATE-----/,/-----END CERTIFICATE-----/p' \| \
15		-awk 'BEGIN {i=0} /BEGIN CERT/{i++} { print > "cert" i ".pem"}'`
	16	+awk 'BEGIN {i=0} /BEGIN CERT/{i++} { print > "cert" i ".pem"}'
	17	+```
16	18
17	19	### Read CRL
18	20	`$ openssl crl -inform {DER\|PEM} -noout -text -in <crl file>`