21 lines
650 B
Plaintext
21 lines
650 B
Plaintext
|
subjhash
|
||
|
|
|
||
|
|
This tool prints the SHA-256 hash of an X.509 certificate's subject
|
||
|
|
info or issuer fields. It can also verify that the hashes of the
|
||
|
|
subject are the same between two certificates.
|
||
|
|
|
||
|
|
Usage: subjhash [-im] certs...
|
||
|
|
|
||
|
|
Flags:
|
||
|
|
-i Print hash of issuer field.
|
||
|
|
-m Matching mode. This expects arguments to be in the form of
|
||
|
|
pairs of certificates (e.g. previous, new) whose subjects
|
||
|
|
will be compared. For example,
|
||
|
|
|
||
|
|
subjhash -m ca1.pem ca1-renewed.pem \
|
||
|
|
ca2.pem ca2-renewed.pem
|
||
|
|
|
||
|
|
will exit with a non-zero status if the subject in the
|
||
|
|
ca1-renewed.pem certificate doesn't match the subject in the
|
||
|
|
ca.pem certificate; similarly for ca2.
|