ratnix I had an idea about trying to use a 'tls-verify' script to detect client certificates that are going to expire soon, so we can warn folks before their certs go bad. Looking through the man page under Environmental Variables (and testing it), there's lots of variables about the certificate's CN, but nothing about its dates. Is it possible to have the cert's 'Not Before' and 'Not After' dates (hopefully in a parseable format) added to the environment variables provided to the same scripts that receive the 'X509_{n}_{subject_field}' variables? And, getting ahead of a possible 'try this instead' suggestion, "just use the CN to look the cert up against your CA" - can't. Our client certs come from an appliance not connected to the VPN server. We're trying to get the cert to audit the client certs and send out timely expiration notices. It's being problematic. Thanks for considering.
Valdez87 Thanks for the update and quick reply. I'll be sure to keep an eye on this thread. Looking for the same issue. Bumped into your thread. Thanks for creating it. Looking forward for solution. Great Lakes Student Loans
