TLS and certificates — openssl, the chain, verification
cheat sheet · Ubuntu 24.04 · OpenSSL 3.0 · curl 8.5 https://lab.dimsanych.ru/en/wiki/openssl-tls/Cheat sheet
-
openssl x509 -in site.pem -noout -subject -issuer -dates -
openssl x509 -in site.pem -noout -ext subjectAltNamenames -
openssl x509 -in site.pem -noout -checkend 259200030 days? -
openssl s_client -connect site.lab.test:443 -servername site.lab.test \ -
-showcerts </dev/null 2>/dev/null | grep -E '^ *[0-9]+ s:|^ +i:' -
openssl verify -CAfile ca.pem -untrusted int.pem site.pem -
curl --cacert ca.pem https://site.lab.test/your own CA -
sudo cp ca.pem /usr/local/share/ca-certificates/lab.crt -
sudo update-ca-certificatestrust the CA