On Thu, Dec 08, 2011, gkout wrote:
>
> Hello everybody,
>
> Nice to find you. My first post in the forum is about printing the text of
> all CA cetificates in a chain file.
>
> openssl x509 -text -noout -in CA_chain_file will not do the job as it only
> prints the first cert in the chain and the rest seem to be ignored.
>
> Is this an openssl command limitation?
> Do I need a script to print all the certificates in the chain?
>
> Thank you all on advance.
>
This is technically a one line script that makes use of a PKCS#7 structure and
may do what you want:
openssl crl2pkcs7 -nocrl -certfile certs.pem \
| openssl pkcs7 -print_certs -text
Not recommended if you have a GB file of certificates as it stores the lot in
memory.
Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [email protected]
