Skip to content

SSL — certificate and key validation

Source: framework/library/ssl.sh

Check if file is a private key file

Return codes

All functions return 0 on success, 1 on failure, 2 on wrong argument count.

Check files

ssl::is_key

Checking if is a private key

Arguments: exactly 1 argument(s)


ssl::is_cert

Checking if is a certificate

Arguments: exactly 1 argument(s)


ssl::is_crl

Checking if is a certificate revocation list

Check if file is a certificate revocation list

Arguments: exactly 1 argument(s)


ssl::is_csr

Checking if is a certificate signing request

Check if file is a certificate signing request

Arguments: exactly 1 argument(s)


ssl::is_dhparam

Checking if is a dh parameter file

Arguments: exactly 1 argument(s)


ssl::is_combined

Checking if file is a combined cert and key

Check if file is a combined certificate and private key pem file

Arguments: exactly 1 argument(s)


Modulus check

ssl::modulus::key

Getting the modulus for key

Get the modulus per type

Arguments: exactly 1 argument(s)


ssl::modulus::cert

Getting the modulus for cert

Arguments: exactly 1 argument(s)


ssl::modulus::csr

Getting the modulus for csr

Arguments: exactly 1 argument(s)


ssl::modulus::get

Retrieving the modulus for all files

Retrieve the modulus of set of files

Arguments: at least 1 argument(s)


ssl::modulus::show

Showing the modulus for all files

Retrieve the modulus and type of a set of files

Arguments: at least 1 argument(s)


ssl::modulus::check

Checking the modulus for all files

Check if files have a matching modulus

Arguments: at least 1 argument(s)


Generation

ssl::generate::read_password_file

Reading passfile /.password

Read password file


ssl::generate::create_directories

Creating directory structure for in

Create a directory structure prior to generating keypairs


ssl::generate::create_random_serial

Creating a new random serial for

Create random serial


ssl::generate::create_crl

Creating certificate revocation list

Create CRL


ssl::generate::create_private_key

Creating private key

Create private key


ssl::generate::create_csr

Generating certificate signing request

Create cert request


ssl::generate::sign_csr

Signing certificate signing request

Create a certificate from a csr


Info gathering / Troubleshooting

ssl::get::file

Reading file using openssl

Get info for file

Arguments: exactly 1 argument(s)


ssl::get::host

Retrieving certificate from host using openssl

Get info for host

Arguments: at least 1 argument(s)


ssl::info

Retrieving ssl certificate info

Retrieve SSL certicate info

Arguments: at least 1 argument(s)


ssl::pem_chain

Checking pem chain

Check a combined pemfile

Arguments: exactly 1 argument(s)