S
S
Saboteur2019-05-03 11:49:51
Command line
Saboteur, 2019-05-03 11:49:51

How to check site certificate against local java truststore?

Googled it, but didn't google it.
Isn't there an easy command line way to validate a remote site's certificate against the local truststore.jks?
Through openssl s_client, you can download a chain of certificates from a remote site in .pem,
but even in this case, it says everywhere "check your truststore for ca certificates" with some thread keytool -list
That is, you still compare strings by hand.
I would like one command (well, two or three, but get a clear true / false answer) in the shell something like this:
$ supercommand validate remoteserver.com:443 ./truststore.jks
And get a response like:
"certificate of remoteserver.com issued by XXXX, which is issued by YYY,....
All Issuers in chain are found in truststore, certificate is valid."

Answer the question

In order to leave comments, you need to log in

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question