Save OpenSSL Command Output to File

Q

How to save the output of an OpenSSL command into a file? I want to make a copy of the server certificate display in the "s_client -connect" command output.

✍: FYIcenter.com

A

If want to save the output an OpenSSL command into a file, you need to run the entire OpenSSL command at the Windows command prompt with the Windows output redirect ">" option as shown below:

C:\Users\fyicenter>\local\openssl\openssl.exe s_client \
   -connect www.twitter.com:443 > twitter.pem

depth=1 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert 
   SHA2 Extended Validation Server CA
verify error:num=20:unable to get local issuer certificate

<Ctrl-C>
read:errno=10093

C:\Users\fyicenter>type twitter.pem

CONNECTED(0000017C)
---
Certificate chain
 0 s:/businessCategory=Private Organization/jurisdictionC=US/jurisdictionST=Delaware
   /serialNumber=4337446/street=Suite 900/street=1355 Market St/postalCode=94103
   /C=US/ST=California/L=San Francisco/O=Twitter, Inc./OU=Twitter Security/CN=twitter.com
   i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert SHA2 Extended Validation Server CA
 1 s:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert SHA2 Extended Validation Server CA
   i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert High Assurance EV Root CA
---
Server certificate
-----BEGIN CERTIFICATE-----
MIIHnTCCBoWgAwIBAgIQB3a13cqDpLnKWY9ddx+eRjANBgkqhkiG9w0BAQsFADB1
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMTQwMgYDVQQDEytEaWdpQ2VydCBTSEEyIEV4dGVuZGVk
...

What we did in this tutorial is:

  • The "openssl s_client" command was executed on the Windows command line prompt directly.
  • The "> twitter.pem" Windows output redirection was used to save the output to the "twitter.pem" file.
  • File name "twitter.pem" was used because the output contains the www.twitter.com server certificate.

 

OpenSSL "s_client" Command

⇒⇒OpenSSL Tutorials

2012-07-24, 10919👍, 0💬