sane-ssl-dump: new script to help debug ssl stuff
This commit is contained in:
parent
d60e5264f3
commit
bd699c887c
|
@ -38,6 +38,7 @@ resholve.mkDerivation {
|
||||||
ncurses
|
ncurses
|
||||||
oath-toolkit
|
oath-toolkit
|
||||||
openssh
|
openssh
|
||||||
|
openssl
|
||||||
rmlint
|
rmlint
|
||||||
rsync
|
rsync
|
||||||
ssh-to-age
|
ssh-to-age
|
||||||
|
@ -53,6 +54,7 @@ resholve.mkDerivation {
|
||||||
"/tmp/rmlint.sh" = true;
|
"/tmp/rmlint.sh" = true;
|
||||||
# intentionally escapes (into user code)
|
# intentionally escapes (into user code)
|
||||||
"$external_cmd" = true;
|
"$external_cmd" = true;
|
||||||
|
"$maybe_sudo" = true;
|
||||||
};
|
};
|
||||||
fake = {
|
fake = {
|
||||||
external = [
|
external = [
|
||||||
|
|
15
pkgs/sane-scripts/src/sane-ssl-dump
Executable file
15
pkgs/sane-scripts/src/sane-ssl-dump
Executable file
|
@ -0,0 +1,15 @@
|
||||||
|
#!/usr/bin/env bash
|
||||||
|
|
||||||
|
# dump info about the provided SSL certificate
|
||||||
|
cert="$1"
|
||||||
|
maybe_sudo=
|
||||||
|
|
||||||
|
if ! (test -e "$cert")
|
||||||
|
then
|
||||||
|
cert="/var/lib/acme/${cert}/full.pem"
|
||||||
|
maybe_sudo=sudo
|
||||||
|
fi
|
||||||
|
|
||||||
|
# $maybe_sudo openssl x509 -in "$file" -text
|
||||||
|
$maybe_sudo openssl crl2pkcs7 -nocrl -certfile "$cert" | openssl pkcs7 -print_certs -text -noout
|
||||||
|
|
Loading…
Reference in New Issue
Block a user