http://comments.gmane.org/gmane.comp.encryption.openssl.user/43587 suggests this one-liner:
openssl crl2pkcs7 -nocrl -certfile CHAINED.pem | openssl pkcs7 -print_certs -text -noout
It indeed worked for me, but I don’t understand the details so can’t say if there are any caveats.
updated june 22:
for openssl 1.1.1 and higher: a single-command answer can be found here serverfault.com/a/1079893 (openssl storeutl -noout -text -certs bundle.crt
)
Related Posts:
- Best location to keep SSL certificates and private keys on Ubuntu servers?
- SSL Error: unable to get local issuer certificate
- How to install OpenSSL in windows 10?
- curl: (60) SSL certificate problem: unable to get local issuer certificate
- curl: (60) SSL certificate problem: unable to get local issuer certificate
- How to generate a self-signed SSL certificate using OpenSSL?
- how to download the ssl certificate from a website?
- Heartbleed: how to reliably and portably check the OpenSSL version?
- Generating a self-signed cert with openssl that works in Chrome 58
- ping: google.com: Temporary failure in name resolution [closed]
- When you use ‘badidea’ or ‘thisisunsafe’ to bypass a Chrome certificate/HSTS error, does it only apply for the current site? [closed]
- When you use ‘badidea’ or ‘thisisunsafe’ to bypass a Chrome certificate/HSTS error, does it only apply for the current site? [closed]
- Docker System has not been booted with systemd as init system
- Openssl : error “self signed certificate in certificate chain”
- CentOS vs. Ubuntu [closed]
- What is .crt and .key files and how to generate them?
- NET::ERR_CERT_REVOKED in Chrome, when the certificate is not actually revoked
- Docker error : no space left on device
- How to establish ssh key pair when “Host key verification failed”
- How to solve “Kernel panic – not syncing – Attempted to kill init” — without erasing any user data
- Received fatal alert: handshake_failure through SSLHandshakeException
- localhost/phpinfo.php
- SSL_read failing with SSL_ERROR_SYSCALL error
- After installing with pip, “jupyter: command not found”
- gpg: no valid OpenPGP data found
- Received fatal alert: handshake_failure through SSLHandshakeException
- gpg: no valid OpenPGP data found
- Java: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
- E: Unable to locate package mongodb-org
- How to open the terminal in Atom?
- Error Importing SSL certificate : Not an X.509 Certificate
- What exactly is cacert.pem for?
- Valgrind permission denied on file
- OpenSSL: unable to verify the first certificate for Experian URL
- Caused by: java.security.UnrecoverableKeyException: Cannot recover key
- SSL CA cert (path? access rights?)
- nginx – nginx: [emerg] bind() to [::]:80 failed (98: Address already in use)
- Unable to establish SSL connection upon wget on Ubuntu 14.04 LTS
- When you use ‘badidea’ or ‘thisisunsafe’ to bypass a Chrome certificate/HSTS error, does it only apply for the current site?
- urllib and “SSL: CERTIFICATE_VERIFY_FAILED” Error
- How to install Boost on Ubuntu
- How to verify if nginx is running or not?
- wget returns “Unable to establish SSL connection”
- Python requests SSL error – certificate verify failed
- Error `sec_error_revoked_certificate` when viewed in Firefox only
- How to disable cURL SSL certificate verification
- Getting error in Curl – Peer certificate cannot be authenticated with known CA certificates
- pdflatex not found. pdflatex is needed for pdf output
- Nginx: stat() failed (13: permission denied)
- PIP Could not find any downloads that satisfy the requirement SQLAlchemy
- MySQL: How to reset or change the MySQL root password?
- Removing all installed OpenCV libs
- How do you sign a Certificate Signing Request with your Certification Authority?
- Vim: No write since last change, even though I changed the file
- Java Keytool error after importing certificate , “keytool error: java.io.FileNotFoundException & Access Denied”
- Why can’t I print to terminal with my python script?
- How to kill a process on a port on ubuntu
- whats the meaning of curl “-s” and “-m”
- Is there a way to force ssl on certain pages
- Share same domain for wp-admin but for different website
- Run WordPress frontend and backend in different domains
- FORCE_SSL_ADMIN not working
- How can I make uploaded images in the editor load with HTTPS?
- Network Admin URL is shown to anyone before accessing a blog
- HSTS header not being added correctly
- Specific Page/Post Need to Stay Non SSL
- My site thinks it’s secure when it is fact not
- Force SSL on a single page which is used as iFrame
- FORCE_SSL_ADMIN affecting subdomains
- Displaying a remote SSL certificate details using CLI tools
- Heartbleed: What is it and what are options to mitigate it?
- How do I view the details of a digital certificate .cer file?
- How do I ask apt-get to skip any interactive post-install configuration steps?
- SSL Certificate Location on UNIX/Linux
- Is there a reason to use an SSL certificate other than Let’s Encrypt’s free SSL?
- How to remove the “installed manually” flag and revert to “automatically installed” with apt-get?
- How do I get apt-get to ignore some dependencies?
- How do I auto-start docker containers at system boot?
- How do I reattach to Ubuntu Server’s ‘do-release-upgrade’ process?
- How to determine JAVA_HOME on Debian/Ubuntu?
- How to start/stop iptables on Ubuntu?
- Which ports do I need to open in the firewall to use NFS?
- list all packages from a repository in ubuntu / debian
- dpkg-reconfigure: unable to re-open stdin: No file or directory
- How can I edit the welcome message when ssh start?
- How does Ubuntu keep track of the “System restart required” flag in motd?
- Does each subdomain need it’s own SSL certificate?
- Amazon Linux vs. Ubuntu for Amazon EC2 [closed]
- Automate the installation of postfix on Ubuntu
- Why is ssh agent forwarding not working?
- Server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
- Disallow file edit not preventing plugin install
- SSL for mapped subdomains in multisite (no plugins)
- Disable REST API for a user ROLE
- How do I handle SSL properly when WP is behind a reverse proxy?
- How do I diagnose a plugin resource 404?
- security issue in wordpress?
- Asking help regarding potential malware
- Can I hide all server / os info?
- Https Website: CSS and JS files load in http and admin page does not load too