|
Size: 376
Comment:
|
Size: 1097
Comment:
|
| Deletions are marked like this. | Additions are marked like this. |
| Line 1: | Line 1: |
| == OpenSSL Linux commandline ssl tool == | == OpenSSL Linux command line ssl tool == |
| Line 3: | Line 3: |
| * [[OpenSslSelfSignedCertificate| openssl self signed certificate with keyUsage flags ]] | |
| Line 4: | Line 5: |
| === Verify a webserver certificate === | === Verify a web server certificate === |
| Line 10: | Line 11: |
=== SSL speed testing === openssl s_time -connect bactracker-dev.9spokes.io:443 -www "/welcome/" openssl s_time -connect bactracker-dev.9spokes.io:443 -www / curl -s -w 'Testing Website Response Time for :%{url_effective}\n\nLookup Time:\t\t%{time_namelookup}\nConnect Time:\t\t%{time_connect}\nPre-transfer Time:\t%{time_pretransfer}\nStart-transfer Time:\t%{time_starttransfer}\n\nTotal Time:\t\t%{time_total}\n' -o /dev/null https://bactracker-dev.9spokes.io 231 connections in 0.29s; 796.55 connections/user sec, bytes read 57981 231 connections in 31 real seconds, 251 bytes read per connection httping |
OpenSSL Linux command line ssl tool
Verify a web server certificate
- openssl s_client -showcerts -connect my.test.com:443
- Output should end on "Verify return code: 0 (ok)"
- As of 2017 the TLS Protocol should be TLSv1.2 at least.
For sni you can add -servername xyz.test.com
SSL speed testing
openssl s_time -connect bactracker-dev.9spokes.io:443 -www "/welcome/" openssl s_time -connect bactracker-dev.9spokes.io:443 -www /
curl -s -w 'Testing Website Response Time for :%{url_effective}\n\nLookup Time:\t\t%{time_namelookup}\nConnect Time:\t\t%{time_connect}\nPre-transfer Time:\t%{time_pretransfer}\nStart-transfer Time:\t%{time_starttransfer}\n\nTotal Time:\t\t%{time_total}\n' -o /dev/null https://bactracker-dev.9spokes.io
231 connections in 0.29s; 796.55 connections/user sec, bytes read 57981 231 connections in 31 real seconds, 251 bytes read per connection
httping