chkcerts icon indicating copy to clipboard operation
chkcerts copied to clipboard

RFE: handling redirections

Open badnetmask opened this issue 2 years ago • 0 comments

Some sites may redirect the content to a new site in a different domain, each one of their own certificates. This tool only sees the last site in the redirection chain. It would be good if it could also handle the original website, otherwise it looks confusing.

Example:

$ chkcerts https://commandlineheroes.com
Subject: www.redhat.com
Issuer: DigiCert SHA2 Extended Validation Server CA
(...)
$ curl -v commandlineheroes.com
(...)
< HTTP/1.1 301 Moved Permanently
< Location: https://www.redhat.com/en/command-line-heroes
(...)
$ echo "" | openssl s_client -connect "commandlineheroes.com:443" | openssl x509 -noout -text -enddate
depth=2 C = US, O = Internet Security Research Group, CN = ISRG Root X1
depth=1 C = US, O = Let's Encrypt, CN = R3
depth=0 CN = commandlineheroes.com
(...)

badnetmask avatar Jul 19 '23 19:07 badnetmask