2020-10-28 19:03:16 +00:00
|
|
|
# openssl s_client
|
|
|
|
|
|
|
|
|
|
> OpenSSL command to create TLS client connections.
|
|
|
|
|
> More information: <https://www.openssl.org/docs/manmaster/man1/openssl-s_client.html>.
|
|
|
|
|
|
|
|
|
|
- Display the start and expiry dates for a domain's certificate:
|
|
|
|
|
|
|
|
|
|
`openssl s_client -connect {{host}}:{{port}} 2>/dev/null | openssl x509 -noout -dates`
|
|
|
|
|
|
|
|
|
|
- Display the certificate presented by an SSL/TLS server:
|
|
|
|
|
|
|
|
|
|
`openssl s_client -connect {{host}}:{{port}} </dev/null`
|
|
|
|
|
|
2022-04-15 13:18:42 +01:00
|
|
|
- Set the Server Name Indicator (SNI) when connecting to the SSL/TLS server:
|
|
|
|
|
|
|
|
|
|
`openssl s_client -connect {{host}}:{{port}} -servername {{hostname}}`
|
|
|
|
|
|
2020-10-28 19:03:16 +00:00
|
|
|
- Display the complete certificate chain of an HTTPS server:
|
|
|
|
|
|
|
|
|
|
`openssl s_client -connect {{host}}:443 -showcerts </dev/null`
|
