Home / server / Questions / 221966
In Process
freddiefujiwra
Asked: 2011-01-14 03:14:51 +0800 CST

Check procedure SSL & CA Certificate by using browser

  • 772

The SSL certification limit is comming so I'd like to upgrade these certifications.

Is there any solutions that check the certifications withought server proxy's cache? We have to been under proxy environment.

How can I clear the cache?

cache proxy ssl ssl-certificate

2 Answers

  1. You can use the following to confirm it's valid from the website:

    openssl s_client -connect <my url>:443

    Or otherwise to verify the certificate chains on the file system before putting them on the website.

    openssl verify [-CApath directory] cert.pem
    • 1

  2. Browsers are not too reliable a testing tool for ssl certificate verification any longer because browser writers have been bundling a lot of certificates into the browser's keystore--certificates that one doesn't necessarily expect to see there. cUrl and openssl still seem to be the most reliable tools for verification for me. Also, some Certificate Authorities provide their own verification tools but you're limited in that the site you're looking to check must be Internet accessible.

    • 0