mirror of
https://github.com/mozilla/cipherscan.git
synced 2024-11-22 14:23:41 +01:00
clean up the extracted certificate
the certificate extracted in the above way will contain some junk from openssl s_client output we don't want like verification status we can remove it ro reduce disk usage for saved certificates
This commit is contained in:
parent
3e37517c96
commit
d9b718be12
@ -188,6 +188,8 @@ test_cipher_on_target() {
|
|||||||
/-----END CERTIFICATE-----/ {split_after=1}
|
/-----END CERTIFICATE-----/ {split_after=1}
|
||||||
{if (n == i) print }
|
{if (n == i) print }
|
||||||
' <<<"$tmp")
|
' <<<"$tmp")
|
||||||
|
# clean up the cert from junk before BEGIN CERTIFICATE
|
||||||
|
cert=$(${OPENSSLBIN} x509 <<<"$cert" 2>/dev/null)
|
||||||
|
|
||||||
# compute sha256 fingerprint of the certificate
|
# compute sha256 fingerprint of the certificate
|
||||||
local sha256sum=$(${OPENSSLBIN} x509 -outform DER <<<"$cert" 2>/dev/null |\
|
local sha256sum=$(${OPENSSLBIN} x509 -outform DER <<<"$cert" 2>/dev/null |\
|
||||||
|
Loading…
Reference in New Issue
Block a user