[prev in list] [next in list] [prev in thread] [next in thread] 

List:       openvpn-users
Subject:    Re: [Openvpn-users] Checking server and client certificates expiration?
From:       David Sommerseth <openvpn () sf ! lists ! topphemmelig ! net>
Date:       2022-09-28 20:28:48
Message-ID: 83737792-48fb-160b-8626-2cdaa66b39c8 () sf ! lists ! topphemmelig ! net
[Download RAW message or body]

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
[Attachment #2 (multipart/mixed)]

[Attachment #4 (text/plain)]

On 28/09/2022 16:40, Joe Patterson wrote:
> The general form of what you want to do is:
> 
> openssl x509 -in file.crt -noout -text | grep 'Not After'
> 

An easier way; this checks if the certificate expires within the next 30 days:

   $ openssl x509 -noout -checkend $((30*24*3600)) -in file.crt || echo "NEED RENEWAL"


-- 
kind regards,

David Sommerseth
OpenVPN Inc



["OpenPGP_signature.asc" (application/pgp-signature)]
[Attachment #6 (--===============1785510700828792778==)]


_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users


[prev in list] [next in list] [prev in thread] [next in thread]