Curl and openssl for verification of SSL certificat - CheatSheet

curl.txt

$ hostname=app20-nadj2-test.apps.fr1.di-paas.domain


# If you are just interested in the code response with curl

$ curl -s -o /dev/null -vL $hostname 2>&1 | grep "<\|>"
> GET / HTTP/1.1
> Host: app20-nadj2-test.apps.fr1.di-paas.domain
> User-Agent: curl/7.64.1
> Accept: */*
>
< HTTP/1.0 503 Service Unavailable
< pragma: no-cache
< cache-control: private, max-age=0, no-cache, no-store
< content-type: text/html



# If your are using SSL/SNI

$REVPROXIP of the reverse proxy
curl  -s -o /dev/null -vL  --resolve $hostname:443:$REVPROXIP https://$hostname/ 2>&1 | grep "<\|>"


Check SSL certificat with chain:
openssl s_client -showcerts -verify 3 -servername $hostname -connect $NODEIP:443 </dev/null &> /tmp/ssl-check.txt