Skip to content

Instantly share code, notes, and snippets.

@woodrow

woodrow/hpkp_hashes.sh

Created February 21, 2014 07:44
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save woodrow/9130294 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save woodrow/9130294 to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. woodrow created this gist Feb 21, 2014.
    9 changes: 9 additions & 0 deletions hpkp_hashes.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,9 @@
    # get the SHA-1 digest of the subjectPublicKeyInfo of a certificate as used by Chromium's preloaded public key pinning
    # http://src.chromium.org/viewvc/chrome/trunk/src/net/http/transport_security_state_static.h?r1=191212&r2=191211&pathrev=191212
    curl -s https://pki.google.com/GIAG2.crt | openssl x509 -inform der -pubkey -noout | openssl pkey -pubin -outform der | openssl dgst -sha1
    # (stdin)= 43dad630ee53f8a980ca6efd85f46aa37990e0ea

    # get the base64-encoded SHA-256 digest of the subjectPublicKeyInfo of a certificate as used by HTTP Public Key Pinning
    # (http://tools.ietf.org/html/draft-ietf-websec-key-pinning-11)
    curl -s https://pki.google.com/GIAG2.crt | openssl x509 -inform der -pubkey -noout | openssl pkey -pubin -outform der | openssl dgst -sha256 -binary | base64
    # 7HIpactkIAq2Y49orFOOQKurWxmmSFZhBCoQYcRhJ3Y=