romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-07-24 02:47:17 +03:00
Code Issues Projects Releases Packages Wiki Activity

SSLCERTS: improve the openssl command line

Browse source 
... for extracting certs from a live HTTPS server to make a cacerts.pem
from them.
This commit is contained in:
Daniel Stenberg 2018-08-20 14:05:28 +02:00
parent a040ff88e4
commit 9dad3bd665
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
docs/SSLCERTS.md
View file

@ -92,8 +92,8 @@ server, do one of the following:
If you use the 'openssl' tool, this is one way to get extract the CA cert
for a particular server:
- `openssl s_client -connect xxxxx.com:443 |tee logfile`
- type "QUIT", followed by the "ENTER" key
- `openssl s_client -showcerts -servername server -connect server:443 > cacert.pem`
- type "quit", followed by the "ENTER" key
- The certificate will have "BEGIN CERTIFICATE" and "END CERTIFICATE"
markers.
- If you want to see the data in the certificate, you can do: "openssl