Theodore Baschak

BOFH. Open Source Guru. Founder/Operator of Hextet Systems, AS395089 and Network Architect for Daemon Defense Systems, AS55101.

SSL CLI Troubleshooting

Sun, 13 Jan 2013 01:52:00 -0600 » Nerd Projects, Networking, IPv6, CLI, System Administration

This afternoon I setup nginx to act as a pop3/imap/smtp proxy w/ SSL. During the setup process it was necessary to test the services via CLI. While its fairly simple to test non-encrypted services, “telnet xx.yy.com 995” doesn’t exactly work. You can even verify the SSL cert chain validity if you’ve got a chain available.

openssl s_client -CAfile ca-certificates.crt -connect ciscodude.net:995

This blog post from KutuKupret was very helpful in the process.

© Theodore Baschak - https://github.com/tbaschak - Powered by Jekyll.
Powered by Les.net.
CiscoDude.net is a personal website. Opinions expressed are not necessarily those of his employer.