How To SSL - X.509 v2/3

4 How to SSL Debugging - Solving SSL matters

Date: 12.05.2008

1. Wie kann ich auf der Shell ein Dokument eines HTTPS Servers abrufen?

   $ openssl s_client -connect localhost:443 -state -debug
   GET / HTTP/1.0

   
   

2. Wie überprüfe ich, ob mein CSR richtig generiert wurde?

   openssl req -verify -text <server.csr  | grep Subject
   

   
   

3. Wie kann ich das Verfalldatum (Expiration Date) des Server-Zertifikates anzeigen lassen?

   openssl x509 -noout -text -in your_domain.crt |grep GMT

   
   

4. Apache doesn't come up again after installation of SSL certificate routines:X509_check_private_key:key values mismatch

   The "modulus" and "public exponent" portions in the key and the certificate must match exactly!

   openssl x509 -noout -text -in yourdomain.crt
   openssl rsa -noout -text -in yourserver.key 
   

   
   

5. Test-run mit dem Zertifikat

   Start Server:

   openssl s_server  -cert myca.crt -key myca.key
   
   openssl s_server -cert ssl.crt/server.crt -key ssl.key/server.key
   

   Start Client:

   openssl s_client -connect localhost:4433 -state
   

   
   

6. Cannot sign my self-created certificate

   Error Message: failed to update database
   TXT_DB error number 2
   Reason is you already signed that common name.