Save OpenSSL Command Output to File

Q

How to save the output of an OpenSSL command into a file? I want to make a copy of the server certificate display in the "s_client -connect" command output.

✍: FYIcenter.com

A

If want to save the output an OpenSSL command into a file, you need to run the entire OpenSSL command at the Windows command prompt with the Windows output redirect ">" option as shown below:

C:\Users\fyicenter>\local\openssl\openssl.exe s_client \
   -connect www.twitter.com:443 > twitter.pem

depth=1 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert 
   SHA2 Extended Validation Server CA
verify error:num=20:unable to get local issuer certificate

<Ctrl-C>
read:errno=10093

C:\Users\fyicenter>type twitter.pem

CONNECTED(0000017C)
---
Certificate chain
 0 s:/businessCategory=Private Organization/jurisdictionC=US/jurisdictionST=Delaware
   /serialNumber=4337446/street=Suite 900/street=1355 Market St/postalCode=94103
   /C=US/ST=California/L=San Francisco/O=Twitter, Inc./OU=Twitter Security/CN=twitter.com
   i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert SHA2 Extended Validation Server CA
 1 s:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert SHA2 Extended Validation Server CA
   i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert High Assurance EV Root CA
---
Server certificate
-----BEGIN CERTIFICATE-----
MIIHnTCCBoWgAwIBAgIQB3a13cqDpLnKWY9ddx+eRjANBgkqhkiG9w0BAQsFADB1
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMTQwMgYDVQQDEytEaWdpQ2VydCBTSEEyIEV4dGVuZGVk
...

What we did in this tutorial is:

The "openssl s_client" command was executed on the Windows command line prompt directly.
The "> twitter.pem" Windows output redirection was used to save the output to the "twitter.pem" file.
File name "twitter.pem" was used because the output contains the www.twitter.com server certificate.

⇒ OpenSSL "s_client -connect" - Show Server Certificate Chain

⇐ OpenSSL "s_client -connect" - View Server Certificate

⇑ OpenSSL "s_client" Command

⇑⇑ OpenSSL Tutorials

2012-07-24, 21188👍, 0💬

OpenSSL "x509 -text" - Print Certificate Info
How to print out text information from a certificate using OpenSSL "x509" command? I want to see the subject and issuer of the certificate. Assuming you have a certificate file located at: C:\Users\fyicenter\twitter.crt ,you can print out certificate information in text format using the "x509 -text"... 2012-07-23, 16066👍, 0💬

OpenSSL "x509 -fingerprint" - Print Certificate Fingerprint
How to print out MD5 and SHA-1 fingerprints of a certificate using OpenSSL "x509" command? I need to see them and validate them with the owner of the certificate. Assuming you have a certificate file located at: C:\Users\fyicenter\twitter.crt ,you can print out certificate fingerprints using the "x5... 2012-07-23, 16047👍, 0💬

OpenSSL "s_client -connect" - Connect to HTTPS Web Site
How to connect to a HTTPS Web site using OpenSSL? I see the Web sites using the "https:\" format. If you see a Web sites using the "https:\" format, for example https://twitter.com/login/, you can try to connect the Web site using the "x509 -connect" command as shown below: C:\Users\fyicenter&gt... 2012-07-24, 13783👍, 0💬

OpenSSL "s_client" Command Options
What can I use OpenSSL "s_client" command for? What are options supported by the "s_client" command? OpenSSL "s_client" command implements a generic SSL/TLS client which can establish a transparent connection to a remote server speaking SSL/TLS. It's intended for testing purposes only and provides o... 2012-07-23, 13486👍, 0💬

OpenSSL "s_client -connect" - Show Server Certificate Chain
How to show all certificates in the server certificate chain using the OpenSSL "s_client -connect" command? I know the server uses multiple intermediate CA certificates. You can get all certificates in the server certificate chain if use "s_client -connect" with the "-showcerts" option as shown belo... 2012-07-24, 12161👍, 0💬

OpenSSL "verify -untrusted" - Specify Untrusted Certificate
How to specify those intermediate CA certificates that form the signing chain for the server certificate for OpenSSl "verify" command? I have the certificate chain from the server saved in a file. If you have the server certificate chain saved in a file, you can provide it to the OpenSSL "verify" co... 2012-07-24, 10329👍, 0💬

OpenSSL "verify" - Verify or Validate Certificate
How to verify or validate a certificate using OpenSSL "verify" command? I got a certificate from the Web site server and want to see if it is valid. If you have a certificate stored in a file, you can try to validate it or verify it with the OpenSSL "verify" command as shown below: C:\Users\fyicente... 2012-07-24, 8175👍, 0💬

OpenSSL "s_client -connect" - View Server Certificate
How to view the server certificate using the OpenSSL "s_client -connect" command? You can get the server certificate, if use "s_client -connect" without the "-quiet" option as shown below: C:\Users\fyicenter>\loc al\openssl\openssl.exeOpenSSL> s_client -connect www.twitter.com:443 CONN... 2012-07-24, 8107👍, 0💬

OpenSSL "verify" Command Options
What can I use OpenSSL "verify" command for? What are options supported by the "verify" command? OpenSSL "verify" command is a utility to verify certificates. Here are options supported by the "verify" command: C:\Users\fyicenter>\loc al\openssl\openssl.exeOpenSSL> verify -h usage: ver... 2012-07-24, 5842👍, 0💬

All rights in the contents of this web site are reserved by the individual author. fyicenter.com does not guarantee the truthfulness, accuracy, or reliability of any contents.