summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDaniel Stenberg <daniel@haxx.se>2018-08-20 14:05:28 +0200
committerDaniel Stenberg <daniel@haxx.se>2018-08-20 14:05:28 +0200
commit9dad3bd6652224aa9a1ce1994a082b000243e09c (patch)
tree1640694d141e48c1360d2b31445527daa319927b
parenta040ff88e4698bdee1eddc0cdb5a7fb65db49201 (diff)
downloadcurl-9dad3bd6652224aa9a1ce1994a082b000243e09c.tar.gz
SSLCERTS: improve the openssl command line
... for extracting certs from a live HTTPS server to make a cacerts.pem from them.
-rw-r--r--docs/SSLCERTS.md4
1 files changed, 2 insertions, 2 deletions
diff --git a/docs/SSLCERTS.md b/docs/SSLCERTS.md
index 3fcd345b0..2c5be68e6 100644
--- a/docs/SSLCERTS.md
+++ b/docs/SSLCERTS.md
@@ -92,8 +92,8 @@ server, do one of the following:
If you use the 'openssl' tool, this is one way to get extract the CA cert
for a particular server:
- - `openssl s_client -connect xxxxx.com:443 |tee logfile`
- - type "QUIT", followed by the "ENTER" key
+ - `openssl s_client -showcerts -servername server -connect server:443 > cacert.pem`
+ - type "quit", followed by the "ENTER" key
- The certificate will have "BEGIN CERTIFICATE" and "END CERTIFICATE"
markers.
- If you want to see the data in the certificate, you can do: "openssl