Re: Don't Test SSL Certificates With Your Browser

Ali Abbas <[email protected]> Wed, 17 Feb 2010 12:07:30 +0100
Newsgroups gmane.comp.programming.load-balancing.general
Message-ID <[email protected]>
--===============0694599202==
Content-Type: multipart/alternative; boundary=0015173ff02c6de431047fc9dc8a

--0015173ff02c6de431047fc9dc8a
Content-Type: text/plain; charset=ISO-8859-1

Hi Tony,

openssl s_client -connect domain.com:443

is another alternative too :)

Regards,

Ali

--
Ali Abbas
Blog: http://alouche.net


On Wed, Feb 17, 2010 at 11:17 AM, Tony Bourke <[email protected]> wrote:

> Hi All,
>
> From the here's-a-good-tip department:
>
> When installing an SSL certificate, it's best *not* to use a browser to
> validate that the certificate has been installed correctly.  Some browsers
> are more forgiving than others, and yours might not throw an error that
> others would.
>
> Instead, use one of the SSL vendor's validation tools, such as this one by
> digicert: http://www.digicert.com/help
>
> Verisign and most of the others have their own validation tools that you
> can find in their support sections.
>
> Digicert: http://www.digicert.com/help
> Verisign:
> https://knowledge.verisign.com/support/ssl-certificates-support/index?page=content&id=AR1130
> Thawte:
> https://search.thawte.com/support/ssl-digital-certificates/index?page=content&id=SO9555&actp=LIST
>
> These will tell you if the certificate and any necessary intermediate certs
> have been installed correctly.
>
> Tony
> _______________________________________________
> lb-l mailing list
> [email protected]
> http://vegan.net/mailman/listinfo/lb-l
> Searchable Archive: http://vegan.net/lb/archive
> http://lbdigest.com Load Balancing Digest
> http://lbwiki.com Load Balancing Wiki
>

--0015173ff02c6de431047fc9dc8a
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Hi Tony,<br><br>openssl s_client -connect <a href=3D"http://domain.com:443"=
>domain.com:443</a> <br><br>is another alternative too :)<br><br>Regards,<b=
r><br>Ali<br><br clear=3D"all">--<br>Ali Abbas<br>Blog: <a href=3D"http://a=
louche.net">http://alouche.net</a><br>


<br><br><div class=3D"gmail_quote">On Wed, Feb 17, 2010 at 11:17 AM, Tony B=
ourke <span dir=3D"ltr">&lt;<a href=3D"mailto:[email protected]">[email protected]=
t</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"borde=
r-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-le=
ft: 1ex;">

Hi All,<br>
<br>
From the here&#39;s-a-good-tip department:<br>
<br>
When installing an SSL certificate, it&#39;s best *not* to use a browser to=
 validate that the certificate has been installed correctly. =A0Some browse=
rs are more forgiving than others, and yours might not throw an error that =
others would.<br>


<br>
Instead, use one of the SSL vendor&#39;s validation tools, such as this one=
 by digicert: <a href=3D"http://www.digicert.com/help" target=3D"_blank">ht=
tp://www.digicert.com/help</a><br>
<br>
Verisign and most of the others have their own validation tools that you ca=
n find in their support sections.<br>
<br>
Digicert: <a href=3D"http://www.digicert.com/help" target=3D"_blank">http:/=
/www.digicert.com/help</a><br>
Verisign: <a href=3D"https://knowledge.verisign.com/support/ssl-certificate=
s-support/index?page=3Dcontent&amp;id=3DAR1130" target=3D"_blank">https://k=
nowledge.verisign.com/support/ssl-certificates-support/index?page=3Dcontent=
&amp;id=3DAR1130</a><br>


Thawte: <a href=3D"https://search.thawte.com/support/ssl-digital-certificat=
es/index?page=3Dcontent&amp;id=3DSO9555&amp;actp=3DLIST" target=3D"_blank">=
https://search.thawte.com/support/ssl-digital-certificates/index?page=3Dcon=
tent&amp;id=3DSO9555&amp;actp=3DLIST</a><br>


<br>
These will tell you if the certificate and any necessary intermediate certs=
 have been installed correctly.<br>
<br>
Tony<br>
_______________________________________________<br>
lb-l mailing list<br>
<a href=3D"mailto:[email protected]" target=3D"_blank">[email protected]</a><br>
<a href=3D"http://vegan.net/mailman/listinfo/lb-l" target=3D"_blank">http:/=
/vegan.net/mailman/listinfo/lb-l</a><br>
Searchable Archive: <a href=3D"http://vegan.net/lb/archive" target=3D"_blan=
k">http://vegan.net/lb/archive</a><br>
<a href=3D"http://lbdigest.com" target=3D"_blank">http://lbdigest.com</a> L=
oad Balancing Digest<br>
<a href=3D"http://lbwiki.com" target=3D"_blank">http://lbwiki.com</a> Load =
Balancing Wiki<br>
</blockquote></div><br>

--0015173ff02c6de431047fc9dc8a--

--===============0694599202==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
lb-l mailing list
[email protected]
http://vegan.net/mailman/listinfo/lb-l
Searchable Archive: http://vegan.net/lb/archive
http://lbdigest.com Load Balancing Digest
http://lbwiki.com Load Balancing Wiki

--===============0694599202==--