Re: s_client output for server's certificate request message?

2014-08-07 Thread Jeffrey Walton
On Thu, Aug 7, 2014 at 5:29 PM, Dr. Stephen Henson wrote: > On Thu, Aug 07, 2014, Jeffrey Walton wrote: > >> I'm trying to track down a client side issue with the use of HTTPS. I >> suspect it has something to do with a server misconfiguration and >> client side certificates. >> >> When running s_

Re: s_client output for server's certificate request message?

2014-08-07 Thread Jeffrey Walton
On Thu, Aug 7, 2014 at 4:57 PM, Kyle Hamilton wrote: > Usually you don't need to echo anything to get the "acceptable client CA > names" list. Thanks. In this case, its IIS 7.5 and its *not* using SNI (SNI is available in IIS 8). So I get a 400 "bad request" without the host header. Jeff > On 8

Re: s_client output for server's certificate request message?

2014-08-07 Thread Dr. Stephen Henson
On Thu, Aug 07, 2014, Jeffrey Walton wrote: > I'm trying to track down a client side issue with the use of HTTPS. I > suspect it has something to do with a server misconfiguration and > client side certificates. > > When running s_client: > > $ echo -e "GET / HTTP/1.1\nHost:example.com\n" | \ >

Re: s_client output for server's certificate request message?

2014-08-07 Thread Kyle Hamilton
Usually you don't need to echo anything to get the "acceptable client CA names" list. -Kyle H On 8/7/2014 1:55 PM, Jeffrey Walton wrote: > I'm trying to track down a client side issue with the use of HTTPS. I > suspect it has something to do with a server misconfiguration and > client side certif

s_client output for server's certificate request message?

2014-08-07 Thread Jeffrey Walton
I'm trying to track down a client side issue with the use of HTTPS. I suspect it has something to do with a server misconfiguration and client side certificates. When running s_client: $ echo -e "GET / HTTP/1.1\nHost:example.com\n" | \ openssl s_client -connect example.com:443 -ssl3 -ign_eof

Re: s_client output

2009-06-03 Thread Bruce Stephens
Joe Friedeggs writes: > I'm pretty much a noob when it comes to SSL, so any help would be > greatly appreciated. I just installed Openldap running TLS with self > signed certs. Everything *seems* to be working fine (LDAP logs show > TLS encryption), but when I run the s_client from the LDAP (Li

s_client output

2009-06-03 Thread Joe Friedeggs
I'm pretty much a noob when it comes to SSL, so any help would be greatly appreciated. I just installed Openldap running TLS with self signed certs. Everything *seems* to be working fine (LDAP logs show TLS encryption), but when I run the s_client from the LDAP (Linux) client, I only see ONLY