#2 Check key validity from command line

[Thibault Capdevielle]

Hello,

I am using Phpki 0.83 and all are working fine but my team monitor the certificate validity with the original openssl command, and we have a nagios software to alarm us when the certificate will expire.

Unfortunatly, when we try to check the certificate we have an issue like that :

root@debian:/etc/phpki-store/CA/private# openssl x509 -in 100001-key.pem -text
unable to load certificate
140099472094888:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:703:Expecting: TRUSTED CERTIFICATE

After some search with google, it's appear the certificate is not a PEM certificate... so i try to add a DER type to this command :

root@debian:/etc/phpki-store/CA/private# openssl x509 -in 100001-key.pem -inform der -text
unable to load certificate
139695159256744:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag:tasn_dec.c:1319:
139695159256744:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error:tasn_dec.c:381:Type=X509

but google say this error is generate with a wrong format...

So my question : have you find another way to check the certificate enddate from command line please ?

Thanks.

Best Regards,

[Thibault Capdevielle]

Ok, i have found my problem.. we are checking the key file and not the certificate file.

All are working now.