## Tools

### SSL

#### Certificate Transparency logs

https://censys.io/certificates

#### Display SSL handshake

```
DST="google.com"
echo "Q" | openssl s_client -connect ${DST}:443 -servername ${DST} -tlsextdebug
```

#### Obtain SSL certificate

```
DST="google.com"
echo "Q" | openssl s_client -connect ${DST}:443 -servername ${DST} -showcerts 2>/dev/null
```

#### Display SSL certificate

```
pbpaste | openssl x509 -text -noout
```

#### Curl and SSL

https://ec.haxx.se/usingcurl-tls.html

### SSH

#### Keys in ssh-agent

```
ssh-add -l
ssh-add -L
```

#### Display signed user certificates

```
pbpaste | ssh-keygen -Lf -
```

#### Display fingerprint

```
# get the SHA256 and ascii art    
ssh-keygen -l -v -f /path/to/publickey

# get the MD5 for private key
openssl pkey -in /path/to/privatekey -pubout -outform DER | openssl md5 -c

# get the MD5 for public key
openssl pkey -in /path/to/publickey -pubin -pubout -outform DER | openssl md5 -c
```