Ssl hpkp

ssl_key_to_hpkp_pin

Generate an HPKP pin (base64-encoded SHA-256 of the public key's DER) from a local private key file.

Arguments

  • $1 (string): Private key file (PEM)

Exit codes

  • 0: Success
  • 1: No input or openssl error

Output on stdout

  • Base64-encoded HPKP pin string

ssl_website_to_hpkp_pin

Generate an HPKP pin by fetching the public key from a live TLS endpoint.

Example

ssl_website_to_hpkp_pin example.com
ssl_website_to_hpkp_pin example.com:8443

Arguments

  • $1 (string): Hostname (and optional :port, default 443)

Exit codes

  • 0: Success
  • 1: No input or openssl error

Output on stdout

  • Base64-encoded HPKP pin string