Wednesday, February 17, 2021

OpenSSL: extract web server certificate details

 echo | openssl s_client -showcerts -servername www.ibm.com -connect www.ibm.com:443 2>/dev/null | openssl x509 -inform pem -noout -text


Script:

inputFile=$1

domainName=$2


awk -v domainName="$domainName" '{print "\necho ==== " $1 "." domainName "====\necho | openssl s_client -showcerts -servername " $1 "." domainName " -connect " $1 "." domainName ":443 2>/dev/null | openssl x509 -inform pem -noout -text" }' $inputFile


Retrieve Ciphers Accepted on remote webserver.

nmap -sV -p 443 --script ssl-enum-ciphers www.ibm.com

Sunday, February 7, 2021

Messages 'Current vnic speed set to: xxxxx' written to syslog every couple seconds

 Problem:

Feb  7 16:16:09 jiangnan kernel: [31322554.355902] scsi host0: Current vnic speed set to :  20000

Cause:

Port speed printing was added by commit d948e6383ec3 ("scsi: fnic:
Add port speed stat to fnic debug stats"). As currently configured,
this will cause the port speed to be printed to syslog every
2 seconds. To prevent log spamming, only print the vnic port speed
at driver initialization and if the speed changes. Also clean up a
small typo in fnic_trace.c.

Solution:

Convert PUTTY Public Key to Openssh format

 ssh-keygen -i -f id_rsa_putty.pub > id_rsa.pub