Editing X.509

Jump to navigation Jump to search

Warning: You are not logged in. Your IP address will be publicly visible if you make any edits. If you log in or create an account, your edits will be attributed to your username, along with other benefits.

The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then save the changes below to finish undoing the edit.

Latest revision Your text
Line 5: Line 5:
  
 
== Examples ==
 
== Examples ==
* <code>[[openssl x509 -inform]] [[pem]] -noout -text</code>
+
* <code>[[openssl x509]] -inform [[pem]] -noout -text</code>
* <code>[[openssl x509 -noout -text]] -in /path/to/your/cert.pem</code>
+
* <code>openssl x509 -noout -text -in /path/to/your/cert.pem</code>
* <code>[[openssl x509 -noout -dates]]</code>
+
* <code>[[keytool]] -printcert -file certificate.pem</code>
* <code>[[keytool -printcert]] -file certificate.pem</code>
 
  
 
* <code>[[openssl x509 -req]]</code>
 
* <code>[[openssl x509 -req]]</code>
Line 14: Line 13:
 
* <code>[[openssl s_client]] -showcerts -connect YOUR_DOMAIN.COM:443 </dev/null 2>/dev/null | [[openssl x509]] -outform PEM > MY_CERTFILE.pem </code>
 
* <code>[[openssl s_client]] -showcerts -connect YOUR_DOMAIN.COM:443 </dev/null 2>/dev/null | [[openssl x509]] -outform PEM > MY_CERTFILE.pem </code>
  
=== Errors ===
+
===Errors===
* <code>Error response from daemon: Get https://URL/: x509: [[certificate signed by unknown authority]]</code>
+
*<code>Error response from daemon: Get https://URL/: x509: certificate signed by unknown authority</code>
  
 
== Security ==
 
== Security ==
Line 22: Line 21:
 
== Activities ==
 
== Activities ==
 
* Read [[GitLab]]: S/MIME X509 verification of commits https://gitlab.com/gitlab-org/gitlab/issues/29782
 
* Read [[GitLab]]: S/MIME X509 verification of commits https://gitlab.com/gitlab-org/gitlab/issues/29782
* [[How to check certification expiration date from command line]]: <code>[[openssl x509 -dates]]</code>
 
* Create new [[x509]] certificate: <code>[[Create new x509 certificate: openssl req -x509 -newkey|openssl req -x509 -newkey]]</code>
 
  
 
== Related terms ==
 
== Related terms ==
 
* [[Vault]]
 
* [[Vault]]
 
* [[Kubernetes]] [[cert-manager]]
 
* [[Kubernetes]] [[cert-manager]]
* <code>E1207 14:22:57.502748      1 scraper.go:140] "[[Failed to scrape node]]" err="Get \"https://172.30.2.2:10250/metrics/resource\": [[x509]]: [[cannot validate certificate]] for 172.30.2.2 because it doesn't contain any IP SANs" node="node01"</code>
 
* [[Subject Alternative Name (SAN)]]
 
* <code>[[/etc/ssl/certs/]]</code>
 
* [[ SSL certificate problem: unable to get local issuer certificate]]
 
  
 
== See also ==
 
== See also ==
* {{openssl x509}}
 
 
* {{X.509}}
 
* {{X.509}}
 
* {{CSR}}
 
* {{CSR}}
 +
* {{TLS}}
 +
* {{CA}}
 +
  
 
[[Category: Security]]
 
[[Category: Security]]
 
[[Category: Cryptography]]
 
[[Category: Cryptography]]

Please note that all contributions to wikieduonline may be edited, altered, or removed by other contributors. If you do not want your writing to be edited mercilessly, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource (see Wikieduonline:Copyrights for details). Do not submit copyrighted work without permission!

Cancel Editing help (opens in new window)

Advertising: