I was thinking there's possibly a 'show' command for that, and searched.

[jpmens@mastodon.social]

I was thinking there's possibly a 'show' command for that, and searched.

Heureka!

I'm getting so tired of this shit. (Sadly I omitted to use noai.duckduckgo.)

[ben@bluetoot.hardill.me.uk]

@jpmens

openssl x509 -in ~/.step/certs/root_ca.crt -noout -sha256 -fingerprint

[jpmens@mastodon.social]

@ben yes, I know that, thanks

alternatively:

jq -r .fingerprint ~/.step/config/defaults.json

[jpmens@mastodon.social]

@ben my _assumption_ was there's some admin_friendlier version as that is necessary during bootstrap of client machines for SSH, at least when do it manually.

[paulehoffman@infosec.exchange]

@jpmens I note that "step ca show fingerprint" got the right first result in Kagi. Yes, it costs money. Yes, it feels worth it to me.

[jpmens@mastodon.social]

@paulehoffman and the ‘right first result’ was … ?

[paulehoffman@infosec.exchange]

@jpmens https://smallstep.com/docs/step-cli/reference/certificate/fingerprint/