-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi Bo,
the imminent release of Easy-RSA version 3.1.1 has tools to manage your PKI with relative ease. https://github.com/OpenVPN/easy-rsa Command `show-expire` will list your entire PKI, a subset of it or an individual certificate, at your request. I can only presume that you have never heard of Easy-RSA before. Sent with Proton Mail secure email. ------- Original Message ------- On Wednesday, September 28th, 2022 at 16:51, Gert Doering <g...@greenie.muc.de> wrote: > Hi, > > On Wed, Sep 28, 2022 at 11:18:41AM -0400, Bo Berglund wrote: > > > <cert> > > -----BEGIN CERTIFICATE----- > > block of characters > > -----END CERTIFICATE----- > > </cert> > > > This is the client certificate (that the server will validate). > > > I don't know what each of these crypto sections does and if they contain > > some > > expire info... > > Or which section contains the date... > > > The not-before/not-after dates are encoded int the x509 blob in <cert>. > > > So, the "grep -A 100" command given will extract "cert plus everything > after it" from the config, and "openssl x509 -in $file -noout -text" > will decode the certificate for you. > > gert > -- > "If was one thing all people took for granted, was conviction that if you > feed honest figures into a computer, honest figures come out. Never doubted > it myself till I met a computer with a sense of humor." > Robert A. Heinlein, The Moon is a Harsh Mistress > > Gert Doering - Munich, Germany g...@greenie.muc.de > _______________________________________________ > Openvpn-users mailing list > Openvpn-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/openvpn-users -----BEGIN PGP SIGNATURE----- Version: ProtonMail wsBzBAEBCAAGBQJjNHArACEJEE+XnPZrkLidFiEECbw9RGejjXJ5xVVVT5ec 9muQuJ0o/AgAv2DL+6dvWr5RH630RONmVqWurEKCwo8OLLyJAGXeqQ5sU2Wb wv1idZbVPrumlQMSa/34jPyD3N/ShuRn2o9nlB8B6MHHRoR38AfU8eyrDrAz ga0RDJCbluK/KuHsshTMeIyZmkbwQ03+D8iXNUbl4sNZZz+IW42WTi+DTqgY 2Sp5OM2a1C7cAUBIMSiFWUbHxxqqRxt8GJkpo9F95nbX5e17sIRea9MkeyVN Sfz7FGVj4WPoARqmPbluubT7/7MUoNtOfUEX69TIzWKcmOhZm2f8XJY8C60u sEBtjc1WVtlOMXuEvccWCDLdl8N6cMx7lv5c3Ab8FTuJ9Fxg6kjxvA== =KK+Y -----END PGP SIGNATURE-----
publickey - tincantech@protonmail.com - 0x09BC3D44.asc
Description: application/pgp-keys
publickey - tincantech@protonmail.com - 0x09BC3D44.asc.sig
Description: PGP signature
_______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
