...
| Code Block | ||
|---|---|---|
| ||
for REALM in `cat probe_identities.txt`; do
tac RUN/$REALM/certs/incoming.pem | grep -B 1000 -m 1 "BEGIN CERTIFICATE" | tac | openssl x509 -noout -text | tee RUN/$REALM/certs/servercert.txt
done |
Here is one concrete application: for all the certs received, print the Subject and whether or not the cert contains a subjectAlternativeName - if not, the server name is only stored in CN, which was of interest once when it came to API usage of geteduroam on Android.
...