Commandlets/snippets for https://github.com/acritelli/rucksack.
Check remote certificate information, including issuer, subject, SAN DNS entries and validity dates.
- requires openssl (tested with OpenSSL 1.1.1l FIPS 24 Aug 2021)
check-ssl-info:
command: 'echo | openssl s_client -no_ign_eof -servername {{ server_name }} -connect {{ server_name }}:443 2>/dev/null | openssl x509 -noout -text -dates| grep -e Issuer: -e notBefore -e notAfter -e Subject: -e DNS: | sed "s/^ *//g; s/ DNS:/ /g; s/DNS:/DNS: /; s/\(not.*\)=/\1: /"'