Add new comment

Submitted by Bill St. Clair on Thu, 2008-06-26 04:39.

I found an easier way to debug SSL connections, at least the certificate chain part, if you have openssl installed on your system, which most Linux systems, and the Macintosh, do.

Debugging SSL Connections recommends using the openssl s_client command. They also talk about ssldump, but that's not on my system, so I haven't tried it.

The following command connects to billstclair.com with SSL, and prints the certificate chain and some other information about the connection. You can then send HTTP commands (e.g. "GET /\n\n"), to fetch a page, or just type Ctrl-D (EOF).

openssl s_client -connect billstclair.com:443 -showcerts

The Java version is much more verbose, though.

Reply



The content of this field is kept private and will not be shown publicly.


*

  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd> <i> <b> <u>
  • Lines and paragraphs break automatically.
  • Web and e-mail addresses are automatically converted into links.
  • You may quote other posts using [quote] tags.
  • Easily link to terms in various wikis. For help, see interwiki.
  • Easily link to terms in various wikis. For help, see interwiki.
  • You may quote other posts using [quote] tags.
  • You can use BBCode tags in the text, URLs will be automatically converted to links
Verify comment authorship
Captcha Image: you will need to recognize the text in it.
*
Please type in the letters/numbers that are shown in the image above.