Re: is there any working example of how to use verify_hostname in command line?

[Edward Tsang via openssl-users <openssl-users@xxxxxxxxxxx>]

the openssl I'm using is in mac

openssl version -a

LibreSSL 2.8.3

On Thu, Mar 3, 2022 at 8:05 PM Edward Tsang <etsang@xxxxxxxxxx> wrote:

Ok here is what I tried but still complaining about unknown options -verify_hostname 

openssl s_client -connect google.com -CAfile etc/auth/cacert.pem -verify_hostname google.com -verify_return_error
unknown option -verify_hostname
usage: s_client args

On Thu, Mar 3, 2022 at 4:10 PM Viktor Dukhovni <openssl-users@xxxxxxxxxxxx> wrote:

[ External sender. Exercise caution. ]

> On 3 Mar 2022, at 6:09 pm, Edward Tsang via openssl-users <openssl-users@xxxxxxxxxxx> wrote:
>
> openssl s_client  -CApath . -CAfile ./cacert.pem -verify_hostname example.com
>
> All I get is "unknown option -verify_hostname
> usage: s_client args"
>
> Have tried combinations of that and check out of doc... really not helping.

You need to specify a server to connect to via the "-connect" option.  It
takes a hostname or IP address as a required argument, with an optional
":port" suffix.

        -connect www.example.com:443
        -connect 192.0.2.1:443
        -connect [::1]:443
        ...

You may also want "-brief" and "-verify_return_error".

--
        Viktor.