aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSilvio Rhatto <rhatto@riseup.net>2014-09-18 16:36:40 -0300
committerSilvio Rhatto <user@example.org>2014-09-18 16:36:40 -0300
commitdafa35f1975eff460456b84e34ffde88161f66c6 (patch)
tree12ac011ee299668353a5e6f30100fbe2468c2aaf
downloadssl-wrapper-dafa35f1975eff460456b84e34ffde88161f66c6.tar.gz
ssl-wrapper-dafa35f1975eff460456b84e34ffde88161f66c6.tar.bz2
Initial import
-rw-r--r--README.md0
-rw-r--r--TODO.md0
-rwxr-xr-xssl49
3 files changed, 49 insertions, 0 deletions
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..e69de29
--- /dev/null
+++ b/README.md
diff --git a/TODO.md b/TODO.md
new file mode 100644
index 0000000..e69de29
--- /dev/null
+++ b/TODO.md
diff --git a/ssl b/ssl
new file mode 100755
index 0000000..afd1a48
--- /dev/null
+++ b/ssl
@@ -0,0 +1,49 @@
+#!/bin/bash
+#
+# SSL wrapper scripts
+#
+# This code is licensed under a Creative Commons License.
+# http://creativecommons.org/licenses/by-nc-sa/3.0/
+#
+
+#
+# show usage
+#
+function usage {
+ echo "SSL wrapper scripts"
+ echo "Based on http://www.madboa.com/geek/openssl/"
+}
+
+#
+# usage: retrieve-cert.sh remote.host.name [port]
+#
+function retrieve {
+ REMHOST=$1
+ REMPORT=${2:-443}
+
+ echo |\
+ openssl s_client -connect ${REMHOST}:${REMPORT} 2>&1 |\
+ sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p'
+}
+
+#
+# usage: fingerprint cert
+#
+function fingerprint {
+ openssl x509 -noout -in $1 -fingerprint
+ openssl x509 -noout -in $1 -fingerprint -md5
+}
+
+# Parse option
+COMMAND="$1"
+shift
+
+if [ "$COMMAND" == "retrieve" ]; then
+ retrieve $*
+elif [ "$COMMAND" == "verify" ]; then
+ openssl verify $*
+elif [ "$COMMAND" == "fingerprint" ] || [ "$COMMAND" == "finger" ]; then
+ fingerprint $*
+else
+ usage
+fi