Re: [Sks-devel] old certificates

[Jeremy T. Bouse]

On 29.04.2014 14:07, Gabor Kiss wrote:
> > I'm not on the list and if you connect to my server
>
> I did not. This was the command:
>
> for server in a.keyserver.pki.scientia.net key.adeti.org key.ip6.li \
>   keys.alderwick.co.uk keys.fedoraproject.org keys.niif.hu 
> keys.sflc.info \
>   keys2.alderwick.co.uk keys2.kfwebs.net keyserver.codinginfinity.com 
> \
>   keyserver.secretresearchfacility.com keyserver.secure-u.de \
>   keyserver.skoopsmedia.net keyserver.ut.mephi.ru 
> keyserver.witopia.net \
>   klucze.achjoj.info pgpkeys.eu sks.alpha-labs.net sks.fidocon.de \
>   sks.karotte.org sks.mrball.net sks.spodhuis.org sks.undergrid.net \
>   zimmermann.mayfirst.org
> do
>         echo $server
>         openssl s_client -servername hkps.pool.sks-keyservers.net \
>                 -connect $server:443 </dev/null  2>/dev/null |
>         openssl x509 -noout -text |
>         grep 'Not Before'
> done

That command could be used to remove one pipe fork by changing "openssl 
x509 -noout -text' to 'openssl x509 -noout -startdate' and remove the 
need for the additional pipe for the grep call.

> Sks-devel mailing list
> address@hidden
> https://lists.nongnu.org/mailman/listinfo/sks-devel