]> gitweb.fluxo.info Git - ssl-wrapper.git/commitdiff
Initial import
authorSilvio Rhatto <rhatto@riseup.net>
Thu, 18 Sep 2014 19:36:40 +0000 (16:36 -0300)
committerSilvio Rhatto <user@example.org>
Thu, 18 Sep 2014 19:36:40 +0000 (16:36 -0300)
README.md [new file with mode: 0644]
TODO.md [new file with mode: 0644]
ssl [new file with mode: 0755]

diff --git a/README.md b/README.md
new file mode 100644 (file)
index 0000000..e69de29
diff --git a/TODO.md b/TODO.md
new file mode 100644 (file)
index 0000000..e69de29
diff --git a/ssl b/ssl
new file mode 100755 (executable)
index 0000000..afd1a48
--- /dev/null
+++ b/ssl
@@ -0,0 +1,49 @@
+#!/bin/bash
+#
+# SSL wrapper scripts
+#
+# This code is licensed under a Creative Commons License.
+# http://creativecommons.org/licenses/by-nc-sa/3.0/
+#
+
+#
+# show usage
+#
+function usage {
+  echo "SSL wrapper scripts"
+  echo "Based on http://www.madboa.com/geek/openssl/"
+}
+
+#
+# usage: retrieve-cert.sh remote.host.name [port]
+#
+function retrieve {
+  REMHOST=$1
+  REMPORT=${2:-443}
+  
+  echo |\
+  openssl s_client -connect ${REMHOST}:${REMPORT} 2>&1 |\
+  sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p'
+}
+
+#
+# usage: fingerprint cert
+#
+function fingerprint {
+  openssl x509 -noout -in $1 -fingerprint
+  openssl x509 -noout -in $1 -fingerprint -md5
+}
+
+# Parse option
+COMMAND="$1"
+shift
+
+if [ "$COMMAND" == "retrieve" ]; then
+  retrieve $*
+elif [ "$COMMAND" == "verify" ]; then
+  openssl verify $*
+elif [ "$COMMAND" == "fingerprint" ] || [ "$COMMAND" == "finger" ]; then
+  fingerprint $*
+else
+  usage
+fi