How can I convert this openssl command in ruby?

Question

I am trying to convert this command to ruby code using OpenSSL:

openssl s_client -verify_hostname www.example.com -connect example.com:443

I've pieced together that openssl has a verify_hostname method but I dont think that I am using this properly. Contextually I have a problem verifying a domain's SAN field. For a given domain I get wrong results. I provide a domain that is clearly a name mismatch buy I get a verify_result code of 0 which is ok. The command above gives me the right information but I can't seem to get this to translate in ruby. Is there an online tool that can convert this for me?

Kamil Gwóźdź · Accepted Answer · 2020-03-10 21:54:19Z

1

-verify_hostname is a parameter and s_client is a method name in your command. Check the output of openssl s_client --help to get more information. OpenSSL gem has a verify_hostname method but its source code looks like it's only checking if provided strings are correct, it does not call the provided host.

All http clients will do the SSL verification for you by default (unless you disable it):

require "net/http"

begin
  Net::HTTP.get(URI("https://expired.badssl.com"))
rescue OpenSSL::SSL::SSLError
  puts "bad ssl cert"
end

If you'd like to to the exact thing as your command does you'd probably need to download host's certificate first and then instantiate it with OpenSSL::X509::Certificate.new verify it with the check_validity method.

edited Mar 10, 2020 at 21:54

answered Mar 10, 2020 at 21:44

Kamil Gwóźdź

7855 silver badges11 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

How can I convert this openssl command in ruby?

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related