46c4c168e7ca3a6b1a4648c6ab9754d443d0dfa4
ssl-debug.md
| ... | ... | @@ -1,8 +1,14 @@ |
| 1 | 1 | <!-- TITLE: Ssl Debug --> |
| 2 | 2 | <!-- SUBTITLE: SSL_ERROR_CERTIFICATE_UNKNOWN_ALERT? What the fuck does that mean? --> |
| 3 | 3 | |
| 4 | +### Read cert |
|
| 5 | +$ openssl s_client -host \<hostname> -port 443 | openssl x509 -noout -text |
|
| 6 | + |
|
| 4 | 7 | ### Dump cert chain |
| 5 | 8 | $ openssl s_client -showcerts -servername \<hostname> -connect \<hostname>:443 |
| 6 | 9 | |
| 7 | 10 | ### Read CRL |
| 8 | -$ openssl crl -inform {DER|PEM} -noout -text -in \<crl> |
|
| ... | ... | \ No newline at end of file |
| 0 | +$ openssl crl -inform {DER|PEM} -noout -text -in \<crl file> |
|
| 1 | + |
|
| 2 | +### Test connection |
|
| 3 | +$ openssl s_client -servername \<hostname> -connect \<hostname>:443 -CAfile \<Root CA cert file> |
|
| ... | ... | \ No newline at end of file |