Alert on missing SANs

This commit is contained in:
Thomas Kähn 2017-05-04 11:09:27 +02:00
parent c9b6ee25b1
commit 5293c51bc4
1 changed files with 2 additions and 3 deletions

View File

@ -5761,10 +5761,9 @@ certificate_info() {
pr_italic "$(out_row_aligned_max_width "$all_san" "$indent " $TERM_WIDTH)" pr_italic "$(out_row_aligned_max_width "$all_san" "$indent " $TERM_WIDTH)"
fileout "${json_prefix}san" "INFO" "subjectAltName (SAN) : $all_san" fileout "${json_prefix}san" "INFO" "subjectAltName (SAN) : $all_san"
else else
out "-- " prln_svrty_high "missing (NOT ok)"
fileout "${json_prefix}san" "INFO" "subjectAltName (SAN) : --" fileout "${json_prefix}san" "HIGH" "subjectAltName (SAN) : --"
fi fi
outln
out "$indent"; pr_bold " Issuer " out "$indent"; pr_bold " Issuer "
#FIXME: oid would be better maybe (see above) #FIXME: oid would be better maybe (see above)
issuer="$($OPENSSL x509 -in $HOSTCERT -noout -issuer -nameopt multiline,-align,sname,-esc_msb,utf8,-space_eq 2>>$ERRFILE)" issuer="$($OPENSSL x509 -in $HOSTCERT -noout -issuer -nameopt multiline,-align,sname,-esc_msb,utf8,-space_eq 2>>$ERRFILE)"