View a certificate fingerprint

It’s possible to check a certificate fingerprint using openssl:

  • SHA-1
openssl x509 -noout -fingerprint -sha1 -inform pem -in [cert-file]
  • SHA-256
openssl x509 -noout -fingerprint -sha256 -inform pem -in [cert-file]
  • MD5
openssl x509 -noout -fingerprint -md5 -inform pem -in [cert-file]

Using fingerprint authentication on Fedora 26

I’ve never ever had any problem using fingerprint authentication on openSUSE 42.1, it worked just out of the box, but when I switched back to Fedora (again), I had some issues configuring it.

On Fedora 26, by default, fingerprint authentication works only for logins but not for sudo. To enable this:

authconfig --enablefingerprint --update

If you’re using an older version of Fedora you can also use:

authconfig-tui

Continue reading