サイト運営でドメイン有効期限、SSL有効期限は忘れないようにしなければいけない。
業者に自動更新を頼んでおくと自動更新してもらえるが、個人で運営している場合は自分で工夫して運用する必要あり。


$ echo "" | openssl s_client -connect ssl.kakaku.com:443 | openssl x509 -enddate -noout | sed 's/notAfter\=//'

$ echo "" | openssl s_client -connect ssl.kakaku.com:443 | openssl x509 -enddate -noout
depth=3 C = US, O = "VeriSign, Inc.", OU = Class 3 Public Primary Certification Authority
verify return:1
depth=2 C = US, O = "VeriSign, Inc.", OU = VeriSign Trust Network, OU = "(c) 2006 VeriSign, Inc. - For authorized use only", CN = VeriSign Class 3 Public Primary Certification Authority - G5
verify return:1
depth=1 C = US, O = "VeriSign, Inc.", OU = VeriSign Trust Network, OU = Terms of use at https://www.verisign.com/rpa (c)10, CN = VeriSign Class 3 International Server CA - G3
verify return:1
depth=0 C = JP, ST = Tokyo, L = Shibuya-ku, O = kakaku.com Inc, OU = Technology Platform Dept, OU = Terms of use at www.verisign.com/rpa (c)05, CN = ssl.kakaku.com
verify return:1
DONE
notAfter=Apr  9 23:59:59 2013 GMT
$
$ echo "" | openssl s_client -connect google.co.jp:443 | openssl x509 -enddate -noout
depth=2 C = US, O = Equifax, OU = Equifax Secure Certificate Authority
verify return:1
depth=1 C = US, O = Google Inc, CN = Google Internet Authority
verify return:1
depth=0 C = US, ST = California, O = Google Inc, CN = google.com
verify return:1
DONE
notAfter=Jan 17 12:55:04 2013 GMT
$

ssl有効期限

参考:
[Nagios] : Check SSL Certificate Expiration Date

Zabbix Fun – Tracking SSL Certificate Expiration Times

Comments are closed.

Post Navigation