Thursday, June 19, 2014

certificates and expiry.

Today we needed to find a way to monitor our ssl certificate expiry dates. A quick search on google pointed me to this document. It was a simple enough matter to get the days remaining before the certificate expires.

Gist

This does not work for us because openssl cannot use a proxy. See openssl-s-client-using-a-proxy.

The option of using another package (proxytunnel) was not possible on our restricted access servers.

So, back to the drawing board. This time, I went for a java solution. A quick and dirty solution can be found  at this gist.

To use this java program, you would call it like so:

java -Dhttps.proxyHost=.. -Dhttps.proxyPort=... -cp SSLCertExpiry www.google.com


No comments:

Post a Comment