/ 
HTTP-PublicKeyPins-0.05
River stage zero No dependents
/ hpkp_pin_sha256

NAME

hpkp_pin_sha256 - Print out the pin-sha256 value for a TLS/SSL certificate

VERSION

Version 0.02

SYNOPSIS

hpkp_pin_sha256 [--help] [--version] path_to_PEM_encoded_certificate_file

DESCRIPTION

This program will print out the pin-sha256 value for a TLS/SSL certificate. The pin-sha256 value for a certificate is used by HTTP Public Key Pins (HPKP) defined by RFC 7469

IMPORTANT - PLEASE UNDERSTAND WHAT THIS HEADER MEANS BEFORE USING IT

Example Public-Key-Pins headers for HTTP from RFC 7469 can be found below;

* Public-Key-Pins: max-age=3000; pin-sha256="\$short_term_pin_sha256_for_primary_key"; pin-sha256="\$short_term_pin_sha256_for_offline_backup_primary_key"

* Public-Key-Pins: max-age=2592000; pin-sha256="\$long_term_pin_sha256_for_primary_key"; pin-sha256="\$long_term_pin_sha256_for_offline_backup_primary_key"

* Public-Key-Pins: max-age=2592000; pin-sha256="\$long_term_pin_sha256_for_primary_key"; pin-sha256="\$long_term_pin_sha256_for_offline_backup_primary_key"; report-uri="http://example.com/pkp-report"

* Public-Key-Pins-Report-Only: max-age=2592000; pin-sha256="\$long_term_pin_sha256_for_primary_key"; pin-sha256="\$long_term_pin_sha256_for_offline_backup_primary_key"; report-uri="https://other.example.net/pkp-report"

* Public-Key-Pins: pin-sha256="\$long_term_pin_sha256_for_primary_key"; pin-sha256="\$long_term_pin_sha256_for_offline_backup_primary_key"; max-age=259200

* Public-Key-Pins: pin-sha256="\$medium_term_pin_sha256_for_primary_key"; pin-sha256="\$medium_term_pin_sha256_for_offline_backup_primary_key"; pin-sha256="\$medium_term_pin_sha256_for_second_offline_backup_primary_key"; max-age=10000; includeSubDomains

EXPORT

SUBROUTINES/METHODS

DIAGNOSTICS

CONFIGURATION AND ENVIRONMENT

DEPENDENCIES

INCOMPATIBILITIES

None known.

SEE ALSO

RFC 7469 - Public Key Pinning Extension for HTTP

AUTHOR

David Dick, <ddick at cpan.org>

BUGS AND LIMITATIONS

Please report any bugs or feature requests to bug-http-publickeypins at rt.cpan.org, or through the web interface at http://rt.cpan.org/NoAuth/ReportBug.html?Queue=HTTP-PublicKeyPins. I will be notified, and then you'll automatically be notified of progress on your bug as I make changes.

LICENSE AND COPYRIGHT

Copyright 2015 David Dick.

This module is free software; you can redistribute it and/or modify it under the same terms as Perl itself. See perlartistic. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.