728x90
openssl 인증서 만료일 조회
sangchul.kr SSL 인증서 만료일 조회
echo | openssl s_client -servername sangchul.kr -connect sangchul.kr:443 2>/dev/null | openssl x509 -noout -dates
$ echo | openssl s_client -servername sangchul.kr -connect sangchul.kr:443 2>/dev/null | openssl x509 -noout -dates
notBefore=Aug 24 16:40:08 2020 GMT
notAfter=Nov 22 16:40:08 2020 GMT
openssl s_client -connect sangchul.kr:443 | openssl x509 -noout -enddate
$ openssl s_client -connect sangchul.kr:443 | openssl x509 -noout -enddate
depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 CN = sangchul.kr
verify return:1
notAfter=Nov 22 16:40:08 2020 GMT
sangchul.kr SSL 인증서 확인
openssl s_client -connect sangchul.kr:443 | tee sangchul.kr.txt
$ openssl s_client -connect sangchul.kr:443 | tee sangchul.kr.txt
depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 CN = sangchul.kr
verify return:1
CONNECTED(00000003)
---
Certificate chain
0 s:CN = sangchul.kr
i:C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
1 s:C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
i:O = Digital Signature Trust Co., CN = DST Root CA X3
---
Server certificate
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgISA7HqKFB2v3f1AqD67hXuOYBcMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
....
echo '' | openssl s_client -connect sangchul.kr:443 | openssl x509 -noout -text
$ echo '' | openssl s_client -connect sangchul.kr:443 | openssl x509 -noout -text
depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 CN = sangchul.kr
verify return:1
DONE
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:b1:ea:28:50:76:bf:77:f5:02:a0:fa:ee:15:ee:39:80:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
Validity
Not Before: Aug 24 16:40:08 2020 GMT
Not After : Nov 22 16:40:08 2020 GMT
Subject: CN = sangchul.kr
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f2:c0:cf:28:9f:d6:0a:0d:c7:7c:8b:d0:2c:
41:97:86:d9:80:d4:71:6a:ee:08:4d:e2:5a:28:d4:
...
인증서 파일(wildcard_sangchul_kr.crt)로 SSL 인증서 만료일 확인
openssl x509 -in wildcard_sangchul_kr.crt -noout -dates
$ openssl x509 -in wildcard_sangchul_kr.crt -noout -dates
notBefore=Sep 30 00:00:00 2022 GMT
notAfter=Sep 30 23:59:59 2023 GMT
openssl x509 -in cert.pem -enddate -noout
$ openssl x509 -in cert.pem -enddate -noout
notAfter=Sep 30 23:59:59 2023 GMT
SSL(TLS) 인증서 만료일 확인 스크립트
ExpirationDate.sh 파일 생성
vim ExpirationDate.sh
#!/bin/bash
SERVER_NAME=${1:-google.com}
PORT=${2:-443}
echo Domain Name : ${SERVER_NAME}
echo '' | openssl s_client -servername ${SERVER_NAME} -connect ${SERVER_NAME}:${PORT} 2>/dev/null | openssl x509 -noout -dates
chmod +x ExpirationDate.sh
$ ./ExpirationDate.sh
Domain Name : google.com
notBefore=Nov 1 02:19:52 2021 GMT
notAfter=Jan 24 02:19:51 2022 GMT
$ ./ExpirationDate.sh scbyun.com
Domain Name : scbyun.com
notBefore=Oct 14 23:30:33 2021 GMT
notAfter=Jan 12 23:30:32 2022 GMT
참고URL
- SSL 인증서 만료일 체크 스크립트 : https://scbyun.com/662
- SSL 인증서의 만료일 확인 : https://sangchul.kr/268
- ShellHacks : https://www.shellhacks.com/openssl-check-ssl-certificate-expiration-date/
728x90
'리눅스' 카테고리의 다른 글
[VPN] Linux에서 SoftEther VPN 클라이언트 설치 (0) | 2021.12.06 |
---|---|
[draft] lftp와 FileZilla를 사용한 FTPS 클라이언트 설정 방법 (0) | 2021.12.06 |
[draft] 웹 프록시 자동 검색 프로토콜을 적용하는 방법 (0) | 2021.12.03 |
[리눅스] elasticsearch 클러스터 구성에서 인덱스 생성 (0) | 2021.12.02 |
[리눅스] HAProxy 패스워드 설정 (0) | 2021.12.02 |