Le sigh. There must be a simpler way, but I cannot find it. Trying to get the SHA256 fingerprint of a x509 certificate as one long string without colons or something works with:
`openssl x509 -in roots.pem -noout -fingerprint -sha256 | sed 's/://g' | sed 's/^.*=//' | awk '{print tolower($0)}'`
UPDATE: This is what I now have in my .bashrc 😀
function certfp(){ openssl x509 -in "$1" -outform DER | sha256sum | cut -d' ' -f1 ; }
Boogarins 10-21-2024 Atrium : discocape : Free Download, Borrow, and Streaming : Internet Archive
Boogarins10-21-2024The Atrium Fort Collins, COSource 1: On Stage Neumann km183's ->Mogami gold xlr->zoom h8 @ 24/48(10' split, @ 7' overhead...Internet Archive
Walmart Deals of the Day: Grab a Top-Rated Beats Speaker for a Record-Low $100
https://www.cnet.com/news/walmart-deals-of-the-day-july-29/?utm_source=flipboard&utm_medium=activitypub
Posted into Daily Deals @daily-deals-cnet
Walmart Deals of the Day: Grab a Top-Rated Beats Speaker for a Record-Low $100
Plus, pick up an eight-piece Carote cookware set and a lightweight Tineco cordless vacuum for half the usual price.Max McHone (CNET)
RIP Ryne Sandberg - Raw Chili
I was born in Chicago, but raised in the Bay Area as a Giants fan. I know my Cub fan relatives who still live there are pretty bummed today since Sandberg wasAuthor (Raw Chili)
Trump gave the USOPC cover on its transgender athlete policy change. It could end up in court anyway
https://apnews.com/article/transgender-olympics-37f083b1269f4575f5548ac41e761d7d?utm_source=flipboard&utm_medium=activitypub
Posted into Sports @sports-AssociatedPress
🇩🇪 #Germany is preparing more than 60 military procurement orders for parliamentary approval by the end of this year, including the purchase of 20 Eurofighter jets, as many as 5,000 Boxer armored vehicles and at least 3,500 Patria Oyj armored vehicles, Bloomberg reports.
bloomberg.com/news/articles/20…
Archive: archive.is/XzUMU
'WWE: Unreal' Reveals Pitch For Surprise Royal Rumble Winner
A new docuseries just revealed a wild, alternate finish for the 2025 Women's Royal Rumble and the winner would have been a huge shock.Andrew Ravens (Newsweek)
Jimmy Haslam: I bet Arch Manning stays in college two years, not worth discussing
https://www.nbcsports.com/nfl/profootballtalk/rumor-mill/news/jimmy-haslam-i-bet-arch-manning-stays-in-college-two-years-not-worth-discussing?utm_source=flipboard&utm_medium=activitypub
Posted into Pro Football Talk @pro-football-talk-NBCSports
Jimmy Haslam: I bet Arch Manning stays in college two years, not worth discussing
Last week, FOX Sports' Colin Cowherd floated the idea that Nick Saban and Arch Manning could be on their way to Cleveland in 2026 as head coach and quarterback.Myles Simmons (NBC Sports)
Exclusive: Dems propose corporate PAC ban
https://www.axios.com/2025/07/29/mark-kelly-elissa-slotkin-corporate-pac-ban?utm_source=flipboard&utm_medium=activitypub
Posted into 2024 Elections @2024-elections-AxiosNews
Los Angeles Sparks riding five-game winning streak as 2nd half of season is underway
https://apnews.com/article/wnba-sparks-9709eb9a65cc5af9522946da4af31823?utm_source=flipboard&utm_medium=activitypub
Posted into Sports @sports-AssociatedPress
Cash App users can now pool money for group payments — even with non-users
techcrunch.com/2025/07/29/cash…
Cash App users can now pool money for group payments -- even with non-users | TechCrunch
Cash App's new feature lets users pool money with a group to pay for expenses like vacations and gifts.Lauren Forristal (TechCrunch)
Mike Huckabee Makes Twisted Nazi Analogy as Horrors in Palestine Grow
https://newrepublic.com/post/198561/mike-huckabee-nazi-analogy-israel-palestine-recognition?utm_source=flipboard&utm_medium=activitypub
Posted into Breaking News @breaking-news-thenewrepublic
Mike Huckabee Makes Twisted Nazi Analogy as Horrors in Palestine Grow
The U.S. ambassador to Israel had an unbelievable reaction to other countries shifting their stance on Palestine.The New Republic
Thundercat announces fall tour dates around III Points Fest
Thundercat is playing Miami's III Points Festival in October and he's announced a tour surrounding that appearance, hitting Atlanta, Miami, NYC, DC, Philly, Boston, Toronto, Chicago, and Denver. All dates are listed below.Bill Pearis (BrooklynVegan)
What do you think of this ? - EUROPE SAYS
This is from the r/transit sub in which they were discussing about a youtube video going over the question of wether or not public transit should be freeEUROPE SAYS
like this
'The body is telling me to rest' – No Vuelta a España for Tadej Pogačar as UAE confirm João Almeida and Juan Ayuso as co-leaders
https://www.cyclingnews.com/news/the-body-is-telling-me-to-rest-no-vuelta-a-espana-for-tadej-pogacar-as-uae-confirm-joao-almeida-and-juan-ayuso-as-co-leaders/?utm_source=flipboard&utm_medium=activitypub
Posted into Sports @sports-thenewsdesk
Shadowgrass Live at The Stone Church, Newmarket, NH on 2025-07-24 : Shadowgrass : Free Download, Borrow, and Streaming : Internet Archive
Shadowgrass 2025-07-24 The Stone Church Newmarket, NH Source: Church -Audio CA-14 cardioid > SP-SPSB-20-12 > PCM-A10 Lineage: WAV > Audacity...Internet Archive
Th ‘Meet The Parents’ sequel has been titled ‘Focker in Law’.
Starring Robert De Niro, Ben Stiller, Owen Wilson, Blythe Danner, Teri Polo, and Ariana Grande.
In theatres Thanksgiving 2026.
#LittleEva
youtube.com/watch?v=IY-63KHQSd…
The LocoMotion Little Eva FULL SONG ReEdit JAR-ReMix STEREO HiQ Hybrid JARichardsFilm 720p
* Little Eva* Backup Vocals by Darlene Love & The Blossoms* DIGITALLY ReStored ReCut FULL SONG Video with JAR-ReMixed Stereo Sound.HiQ Hybrid = Live Video ...YouTube
![[BasketNews] Porzingis: “After the season, I spoke to my agent and kind of expected that one or more of us would be traded. For a while, I thought I might end up with the Spurs, but then Atlanta came in—and that was a nice surprise. It was out of my hands.”](https://friendica.rogueproject.org/photo/preview/640/4860639 "[BasketNews] Porzingis: “After the season, I spoke to my agent and kind of expected that one or more of us would be traded. For a while, I thought I might end up with the Spurs, but then Atlanta came in—and that was a nice surprise. It was out of my hands.”")
New blog post time!
The finale of Core Design July is Banshee, a shoot 'em up that combines elements of games like 1942 and Twinbee into something that works way better than you might expect. Add in detailed visuals and a bit of humor and you've got a great showpiece for the Amiga and Core Design alike:
ephemeralenigmascom.wordpress.…
#CoreDesign #amiga #shootemup #videogames #blog #writing #retrogaming
Banshee
Banshee might not be an arcade game, but it’s one that absolutely nails their particular spirit. It’s a heck of a spectacle, it plays really well, it offers plenty of challenge, and it manages to s…Ephemeral Enigmas
@misty Blastar is more likely to be what you're thinking of since that one has a full OST compared to Banshee, but yeah, it's very strange how little music there is in this!
I picked the CD32 version thinking they would have added some beyond the intro and ending, but nope! I'd like to know why as well, I couldn't find anything about it and previous Core Design games didn't skimp on music, so it could very well have been some kind of time/budget/space constraint unique to its development
Israel won’t face EU penalties over Gaza suffering — yet
https://www.politico.eu/article/israel-war-in-gaza-humanitarian-crisis-eu-penalties-horizon-research-program/?utm_source=flipboard&utm_medium=activitypub
Posted into POLITICO Europe @politico-europe-POLITICOEurope
Israel won’t face EU penalties over Gaza suffering — yet
A Brussels plan to suspend Israel’s participation in the Horizon research program needs to win more backing from countries.Tim Ross (POLITICO)
Maardu linnapäevadel esines artist nõukogude armee mundris. Linn: programm peegeldas linna mitmekesist
Et Maardus on huvitavad vaated, see selleks. Aga selgitus on lihtsalt suurepärane!EUROPE SAYS
Liverpool Predicted Lineup vs. Yokohama FM: Ekitike Debut, Wirtz Continues as False Nine
https://www.si.com/soccer/liverpool-predicted-lineup-vs-yokohama-fm-ekitike-debut-wirtz-continues-false-nine?utm_source=flipboard&utm_medium=activitypub
Posted into Sports @sports-thenewsdesk
Liverpool Predicted Lineup vs. Yokohama FM: Ekitike Debut, Wirtz Continues as False Nine
Liverpool are set to have another debutant on Wednesday as they take on Yokohama F. Marinos in a pre-season friendly.James Cormack (Sports Illustrated)
RE: bsky.app/profile/did:plc:bj26d…
Charlotte Bluegrass All Stars Live At Jack's ! Live Charlotte, North Carolina 2025-07-13 : Charlotte Bluegrass All Stars : Free Download, Borrow, and Streaming : Internet Archive
Charlotte Bluegrass All StarsJack's ! LiveCharlotte, North Carolina7/13/2025Source: Schoeps CCM4V'S>Sound Devices Mix-Pre 6 II (48/32)FOB/DFC/KFC/ZFC/AARP...Internet Archive
Food Prices Will Rise Under Trump, Group Warns
"Tariffs on food imports will likely lead to higher food prices, making consumers worse off," the Tax Foundation said.Hugh Cameron (Newsweek)
The global economy is surviving Trump's trade wars with stronger-than-expected growth, the IMF said — even as a drag from fraying trade relations is likely to continue.
‘My Life With The Walter Boys’ Adds Chad Rook As Recurring Guest For Season 3
https://deadline.com/2025/07/my-life-with-the-walter-boys-casts-chad-rook-season-3-1236472571/?utm_source=flipboard&utm_medium=activitypub
Posted into Deadline Hollywood @deadline-hollywood-Deadline
My Life With The Walter Boys Casts Chad Rook For Season 3
Chad Rook has joined My Life With The Walter Boys as a recurring guest for Season 3Katie Campione (Deadline)
'Great cover': CEOs caught admitting they're using tariffs as excuse to jack up prices
The effects of U.S. President Donald Trump's tariffs are winding their way through the American economy, and a new piece of analysis claims that corporate America is using them as "cover" to further jack up prices.Brad Reed, Common Dreams (Raw Story)
NBA buyout candidates: Khris Middleton, Nikola Vučević among five names who could hit free agency this season
https://www.cbssports.com/nba/news/nba-buyout-candidates-khris-middleton-nikola-vucevic-among-five-names-who-could-hit-free-agency-this-season/?utm_source=flipboard&utm_medium=activitypub
Posted into Sports @sports-thenewsdesk
NBA buyout candidates: Khris Middleton, Nikola Vučević among five names who could hit free agency this season
This has been the offseason of buyouts thus farSam Quinn (CBS Sports)
West Nile virus found in Dauphin County township
https://www.pennlive.com/news/2025/07/west-nile-virus-found-in-dauphin-county-township.html?utm_source=flipboard&utm_medium=activitypub
Posted into Central Pa. News: PennLive.com @central-pa-news-pennlive-com-PennLivedotcom
West Nile virus found in Dauphin County township
West Nile virus is spread among humans through mosquito bites. Most people do not experience symptoms, but some can become seriously ill.Jenna Wise | jwise@pennlive.com (pennlive)
B.C. man convicted of 12-hour confinement, assault of ex sentenced to 6 years in prison
https://www.cbc.ca/news/canada/british-columbia/unlawful-confinement-and-abuse-1.7596034?utm_source=flipboard&utm_medium=activitypub
Posted into British Columbia @british-columbia-cbcnews
Lilith Ashley Nyx Arson
in reply to Jan Wildeboer 😷 • • •Benjamin
in reply to Jan Wildeboer 😷 • • •openssl x509 -in roots.pem -noout -serial | cut -f2 -d=
joui
in reply to Jan Wildeboer 😷 • • •Depending on the sed variant awk may not be required and only one sed invocation is required.
openssl x509 -in root.pem -noout -fingerprint -sha256 | sed 's/://g;s/^.*=//;y/ABCDEF/abcdef/'
BusyBox on openwrt and GNU sed on debian have transliterate 'y//'
donburi
in reply to Jan Wildeboer 😷 • • •PhreakByte
in reply to Jan Wildeboer 😷 • • •Compile and use this ;)
#include <stdio.h>
#include <stdlib.h>
#include <openssl/x509.h>
#include <openssl/pem.h>
#include <openssl/evp.h>
#include <openssl/err.h>
void print_sha256_fingerprint(X509 *cert) {
unsigned char md[EVP_MAX_MD_SIZE];
unsigned int n = 0;
if (!X509_digest(cert, EVP_sha256(), md, &n)) {
fprintf(stderr, "Error calculating SHA256 digest\n");
return;
}
// Print as lowercase hex string without colons
for (unsigned int i = 0; i < n; i++) {
printf("%02x", md[i]);
}
printf("\n");
}
int main(int argc, char *argv[]) {
... show moreif (argc != 2) {
Compile and use this ;)
#include <stdio.h>
#include <stdlib.h>
#include <openssl/x509.h>
#include <openssl/pem.h>
#include <openssl/evp.h>
#include <openssl/err.h>
void print_sha256_fingerprint(X509 *cert) {
unsigned char md[EVP_MAX_MD_SIZE];
unsigned int n = 0;
if (!X509_digest(cert, EVP_sha256(), md, &n)) {
fprintf(stderr, "Error calculating SHA256 digest\n");
return;
}
// Print as lowercase hex string without colons
for (unsigned int i = 0; i < n; i++) {
printf("%02x", md[i]);
}
printf("\n");
}
int main(int argc, char *argv[]) {
if (argc != 2) {
fprintf(stderr, "Usage: %s <certificate.pem>\n", argv[0]);
return EXIT_FAILURE;
}
const char *cert_path = argv[1];
FILE *fp = fopen(cert_path, "r");
if (!fp) {
perror("Error opening certificate file");
return EXIT_FAILURE;
}
OpenSSL_add_all_algorithms();
ERR_load_BIO_strings();
ERR_load_crypto_strings();
X509 *cert = PEM_read_X509(fp, NULL, NULL, NULL);
fclose(fp);
if (!cert) {
fprintf(stderr, "Error reading certificate from file\n");
ERR_print_errors_fp(stderr);
return EXIT_FAILURE;
}
print_sha256_fingerprint(cert);
X509_free(cert);
return EXIT_SUCCESS;
}
Benjamin
Unknown parent • • •Oh, sorry, misread that. I guess you could use tr and cut instead of sed and awk, but that's just trading one kludge for another.
What's the goal you want the fingerprint for?
Johannes
in reply to Jan Wildeboer 😷 • • •Benjamin
Unknown parent • • •Jan Wildeboer 😷
in reply to Jan Wildeboer 😷 • • •John Francis 🦫🇨🇦🍁💪⬆️
in reply to Jan Wildeboer 😷 • • •PhreakByte
in reply to Jan Wildeboer 😷 • • •Jan Wildeboer 😷
in reply to Jan Wildeboer 😷 • • •OK. Thank you all for your input and ideas! This is the version I now use:
`openssl x509 -in roots.pem -outform DER | sha256sum | cut -d' ' -f1`
Example use at codeberg.org/jwildeboer/gists/…
gists/2025/20250728AddRootCertRHEL.md at main
Codeberg.orgBen Hardill
in reply to Jan Wildeboer 😷 • • •Larvitz
in reply to Jan Wildeboer 😷 • • •I fiddled around with such openssl commands, when I build my home/colo CA
It's a completely air-gapped Raspberry PI4 with an Nitrokey HSM Hardware-Security Module) where the CA key material of the root-ca lives on.
Also used step-ca but without containerization (just running the step binary)
Passim
in reply to Jan Wildeboer 😷 • • •Cool. You could make it even simpler if you have `sha256` available (macOS/BSD).
`openssl x509 -in roots.pem -outform DER | sha256`
Passim
in reply to Jan Wildeboer 😷 • • •Maybe:
`openssl x509 -in cert.pem -outform DER | openssl dgst -sha256 | cut -d' ' -f2`
Larvitz
in reply to Jan Wildeboer 😷 • • •openssl x509 -in roots.pem -outform DER | openssl dgst -sha256 | cut -d' ' -f2
That's the simplest, I can come up with. No sed, no awk. Just openssl and a single cut
Larvitz
Unknown parent • • •Larvitz
Unknown parent • • •How about this? That would mitigate it (too):
openssl x509 -in cert.pem -outform DER | sha256sum | head -c64
Larvitz
Unknown parent • • •I'll keep the version with cut in my cheatsheet. I find it more explicit and common, that just relying on the number of characters.
But that's now just a question of personal taste/preference 😀
Patrick Mevzek
in reply to Jan Wildeboer 😷 • • •PhreakByte
in reply to Jan Wildeboer 😷 • • •GitHub - nieldk/openssl: TLS/SSL and crypto library
GitHubPhreakByte
in reply to PhreakByte • • •Add cert-fingerprint command to extract SHA-256 fingerprint from X.509 certs without colons by nieldk · Pull Request #28165 · openssl/openssl
GitHubPhreakByte
in reply to PhreakByte • • •PhreakByte
in reply to PhreakByte • • •PhreakByte
in reply to PhreakByte • • •Add -fingerprint256format to x509 by nieldk · Pull Request #28260 · openssl/openssl
GitHubJan Wildeboer 😷
in reply to PhreakByte • • •PhreakByte
in reply to Jan Wildeboer 😷 • • •