TLSC(1)

NAME
tlsc - UCSPI TLS Client

SYNOPSIS
tcpclient host port tlsc [-hsCHTV] [-F fingerprint] [-n hostname] [-c cert_file] [-f ca_file] [-p ca_path] program [args...]

DESCRIPTION
The tlsc utility is a TLS client to be used in an UCSPI exec-chains. tlsc initializes the TLS tunnel an checks the server side certificate. The certificate verification can be controlled by to following options. The system CA certificates are used to verify the current connection certificate by default. With -f tlsc verifies the certificate chain based on one of the CA certificates stored in ca_file It is also possible to set a directory of CA certificate as trusted base with -p. The options are as follows:

-h  Show usage text.

-s  Show the servers certificate information and exits. All certificate checks are deactivated in this case.

-c  Uses first private key in cert_file for client site authentication.

-f cafile
    cafile is a file of CA certificates in PEM format. The file can contain several CA certificates.

-p capath
    capath is a directory containing CA certificates in PEM format. The files each contain one CA certificate.

-n hostname
    Uses hostname for hostname verification.

-F fingerprint
    sets the hash of the server certificate. If the hash does not match than the connection is about after handshake. (look at option -s to get the fingerprint)

-H  Disables hostname verification.

-C  Disables certificate chain verification.

-T  Disables time verification.

-V  Disables certificate verification in general.

ENVIRONMENT

TLSC_FINGERPRINT
    sets fingerprint of the fingerprint. If the fingerprint does not match than the connection is about after the TLS handshake. (look at option -s to get the fingerprint)

TLSC_NO_VERIFICATION
    turns of all kind of certificate verification.

TLSC_NO_HOST_VERIFICATION
    turns of verification of the certificate hostname.

TLSC_NO_CERT_VERIFICATION
    turns of verification of the certificate chain.

TLSC_NO_TIME_VERIFICATION
    turns of verification of the certificate validation time.

EXIT STATUS

SEE ALSO
socks(1), tcpclient(1)

AUTHORS
-nosplit The tlsc program was written by Jan Klemkow <j.klemkow@wemelug.de>.