{"id":2161,"date":"2018-09-20T07:48:12","date_gmt":"2018-09-20T07:48:12","guid":{"rendered":"http:\/\/blog.datentraeger.li\/?p=2161"},"modified":"2018-09-20T07:50:41","modified_gmt":"2018-09-20T07:50:41","slug":"ablaufdatum-eines-smtp-zertifikates-anzeigen","status":"publish","type":"post","link":"https:\/\/blog.datentraeger.li\/?p=2161","title":{"rendered":"Ablaufdatum eines STARTTLS\/SMTP-Zertifikates anzeigen"},"content":{"rendered":"<p>Um STARTTLS zu testen, verwendet man ja generell openssl<\/p>\n<pre class=\"lang:default decode:true \">openssl s_client -connect smtp.example.org:25 -starttls smtp<\/pre>\n<p>Hier wird jedoch kein Ablaufdatum des Zertifikates angezeigt. Aber dies kann man mit enddate ausfindig machen<\/p>\n<pre class=\"lang:default decode:true\">openssl s_client -connect smtp.example.org:25 -starttls smtp | openssl x509 -enddate -noout\r\n\r\n&gt; depth=2 O = Digital Signature Trust Co., CN = DST Root CA X3\r\n&gt; verify return:1\r\n&gt; depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3\r\n&gt; verify return:1\r\n&gt; depth=0 CN = smtp.example.org\r\n&gt; verify return:1\r\n&gt; 250 DSN\r\n&gt; DONE\r\n&gt; notAfter=Oct 25 07:16:47 2018 GMT\r\n<\/pre>\n<p>Wenn man openssl gleich nach dem command beenden will, kann man einfach ein quit printen<\/p>\n<pre class=\"lang:default decode:true  \">printf 'quit\\n' | openssl s_client -connect smtp.example.org:25 -starttls smtp | openssl x509 -enddate -noout<\/pre>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"Um STARTTLS zu testen, verwendet man ja generell openssl openssl s_client -connect smtp.example.org:25 -starttls smtp Hier wird jedoch kein Ablaufdatum des Zertifikates angezeigt. Aber dies kann man mit enddate ausfindig machen openssl s_client -connect smtp.example.org:25 -starttls smtp | openssl x509 -enddate -noout &gt; depth=2 O = Digital Signature Trust Co.,&hellip;\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[36,8],"tags":[],"class_list":["post-2161","post","type-post","status-publish","format-standard","hentry","category-cli","category-mail"],"_links":{"self":[{"href":"https:\/\/blog.datentraeger.li\/index.php?rest_route=\/wp\/v2\/posts\/2161","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.datentraeger.li\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.datentraeger.li\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.datentraeger.li\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.datentraeger.li\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2161"}],"version-history":[{"count":4,"href":"https:\/\/blog.datentraeger.li\/index.php?rest_route=\/wp\/v2\/posts\/2161\/revisions"}],"predecessor-version":[{"id":2165,"href":"https:\/\/blog.datentraeger.li\/index.php?rest_route=\/wp\/v2\/posts\/2161\/revisions\/2165"}],"wp:attachment":[{"href":"https:\/\/blog.datentraeger.li\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2161"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.datentraeger.li\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2161"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.datentraeger.li\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2161"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}