1
0
Fork 0

Add last missing blog post before switching blogs

This commit is contained in:
Sebastian Schulze 2014-07-04 19:21:38 +02:00
parent 3b97ca6e9c
commit b7e800e4de
1 changed files with 19 additions and 0 deletions

View File

@ -0,0 +1,19 @@
---
title: "Checking SSL certificates with SNI via OpenSSL"
date: 2014-05-17 17:10:06
lang: en
categories: ssl sni openssl
---
To check the ssl certificate of a site which has
[SNI](https://en.wikipedia.org/wiki/Server_Name_Indication)
enabled, just add the -servername parameter to the s\_client:
{% highlight bash %}
$ openssl s\_client -servername site.example.com -connect example.com:443
{% endhighlight %}
To see only the relevant parts of the certificate well grep for it:
{% highlight bash %}
$ openssl s_client -servername site.example.com -connect example.com:443 2>/dev/null|openssl x509 -text|grep -e "DNS:\|CN="
{% endhighlight %}