Cannot check local CRLs in DER format

matteocorti / check_ssl_cert

A shell script (that can be used as a Nagios/Icinga plugin) to check an SSL/TLS connection.

GNU General Public License v3.0

368 stars 132 forks source link

Cannot check local CRLs in DER format #313

Closed matteocorti closed 3 years ago

matteocorti commented 3 years ago

Describe the bug

Cannot check local CRLs in DER format

To Reproduce

wget http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl
./check_ssl_cert -f ./DigiCertTLSRSASHA2562020CA1.crl 
SSL_CERT UNKNOWN ./DigiCertTLSRSASHA2562020CA1.crl: Error converting ./DigiCertTLSRSASHA2562020CA1.crl: unable to load certificate

Expected behavior

Should convert the CRL to PEM to further process it