Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Get/Copy the host certificate

for a proxy cert or so copy it

export FOOCERT=/foo/dir/cert.pem

or read it from a server

openssl s_client -showcerts -connect www.desy.de:443 </dev/null > /foo/dir/cert.pem

checking proxy/certificate chain

...

tmpdir="/tmp/x509_cert_tmp"
mkdir $tmpdir
awk "{print > \"$tmpdir/cert\" (1+n) \".pem\"} /-----END CERTIFICATE-----/ {n++}" "$X509_USER_PROXY${FOOCERT}"
for CERT in $tmpdir/*; do openssl x509 -in $CERT -noout -text; done

...