319
Comment:
|
469
|
Deletions are marked like this. | Additions are marked like this. |
Line 1: | Line 1: |
== OpenSSL Linux commandline ssl tool == | == OpenSSL Linux command line ssl tool == |
Line 3: | Line 3: |
* [[OpenSslSelfSignedCertificate| openssl self signed certificate with keyUsage flags ]] | |
Line 4: | Line 5: |
=== Verify a webserver certificate === | === Verify a web server certificate === |
Line 8: | Line 9: |
* For sni you can add '''-servername xyz.test.com''' |
OpenSSL Linux command line ssl tool
Verify a web server certificate
- openssl s_client -showcerts -connect my.test.com:443
- Output should end on "Verify return code: 0 (ok)"
- As of 2017 the TLS Protocol should be TLSv1.2 at least.
For sni you can add -servername xyz.test.com