Alert on missing SANs
This commit is contained in:
parent
c9b6ee25b1
commit
5293c51bc4
|
@ -5761,10 +5761,9 @@ certificate_info() {
|
||||||
pr_italic "$(out_row_aligned_max_width "$all_san" "$indent " $TERM_WIDTH)"
|
pr_italic "$(out_row_aligned_max_width "$all_san" "$indent " $TERM_WIDTH)"
|
||||||
fileout "${json_prefix}san" "INFO" "subjectAltName (SAN) : $all_san"
|
fileout "${json_prefix}san" "INFO" "subjectAltName (SAN) : $all_san"
|
||||||
else
|
else
|
||||||
out "-- "
|
prln_svrty_high "missing (NOT ok)"
|
||||||
fileout "${json_prefix}san" "INFO" "subjectAltName (SAN) : --"
|
fileout "${json_prefix}san" "HIGH" "subjectAltName (SAN) : --"
|
||||||
fi
|
fi
|
||||||
outln
|
|
||||||
out "$indent"; pr_bold " Issuer "
|
out "$indent"; pr_bold " Issuer "
|
||||||
#FIXME: oid would be better maybe (see above)
|
#FIXME: oid would be better maybe (see above)
|
||||||
issuer="$($OPENSSL x509 -in $HOSTCERT -noout -issuer -nameopt multiline,-align,sname,-esc_msb,utf8,-space_eq 2>>$ERRFILE)"
|
issuer="$($OPENSSL x509 -in $HOSTCERT -noout -issuer -nameopt multiline,-align,sname,-esc_msb,utf8,-space_eq 2>>$ERRFILE)"
|
||||||
|
|
Loading…
Reference in New Issue