Added openssl s_client to view cert expiration

2013-09-01 15:56:15 -04:00 · 2013-09-01 15:56:15 -04:00 · 4d6bc270cf
parent 14821d424c
commit 4d6bc270cf
1 changed files with 5 additions and 0 deletions
--- a/cheatsheets/openssl
+++ b/cheatsheets/openssl
@ -8,3 +8,8 @@ openssl req -new -key server.key -out server.csr
 openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt

 # (The above commands may be run in sequence to generate a self-signed SSL certificate.)
+
+To view certificate expiration:
+echo | openssl s_client -connect <hostname>:443 2> /dev/null | \
+awk '/-----BEGIN/,/END CERTIFICATE-----/' | \
+openssl x509 -noout -enddate