Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 388
  • Last Modified:

Download x509 certificate from ssl host

Hi,

Is there any tool with i can put host params like ip and port and it downloads cert file on my computer?
0
lavitz
Asked:
lavitz
1 Solution
 
Dave HoweSoftware and Hardware EngineerCommented:
yes, several :)

openssl program with the s_client parameter can pull certs from a remote port. try for example:

openssl s_client  -connect www.google.com:443

and cut and paste the section between:
-----BEGIN CERTIFICATE-----
and
-----END CERTIFICATE-----
(including those two lines) into a file called cert.cer (or whatever.cer)

ditto, you can use
gnutls-cli --print-cert -p 443 www.google.com 

There is no benefit to using gnutls in this case, but if you are (for example) wanting to get a cert from a mail server that requires you to type "STARTTLS" first, it is invaluable.
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now