goutils/cmd/subjhash
Kyle Isom d66cfe1145 Cut over to Bazel. 2023-05-04 14:00:30 -07:00
..
BUILD.bazel Cut over to Bazel. 2023-05-04 14:00:30 -07:00
README Cleanups and docs. 2017-10-20 12:38:41 -07:00
main.go Mass rewrite imports -> git.wntrmute.dev repo. 2023-05-04 13:58:43 -07:00

README

subjhash

This tool prints the SHA-256 hash of an X.509 certificate's subject
info or issuer fields. It can also verify that the hashes of the
subject are the same between two certificates.

Usage: subjhash [-im] certs...

Flags:
	-i	Print hash of issuer field.
	-m	Matching mode. This expects arguments to be in the form of
		pairs of certificates (e.g. previous, new) whose subjects
		will be compared. For example,

			subjhash -m ca1.pem ca1-renewed.pem	\
				ca2.pem ca2-renewed.pem

		will exit with a non-zero status if the subject in the
		ca1-renewed.pem certificate doesn't match the subject in the
		ca.pem certificate; similarly for ca2.