Solved

How to get the public certificate

Posted on 2011-02-27
5
887 Views
Last Modified: 2012-06-27
Hello I am trying to use the openssl s_client option to see the public file of one host which is running on port 1234. Please note this is not web server but a application which uses the SSL cert. How can I see the cert of this app on host on 1234? I am getting below errors. Thanks!

user@hostname:~$ openssl s_client -connect example.company.com:1234
CONNECTED(00000003)
depth=1 /C=US/ST=California/L=San Jose/O=Company, Inc./OU=IT/CN=IT DEV CA/emailAddress=webmasters@company.com
verify error:num=19:self signed certificate in certificate chain
verify return:0
27556:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure:s3_pkt.c:1102:SSL alert number 40
27556:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188:

Open in new window

0
Comment
Question by:beer9
  • 2
  • 2
5 Comments
 
LVL 7

Expert Comment

by:gnurl
ID: 34994646
Hi,

this is nor really my source of interest, but did you already try to access the https://example.company.com:1234
in a webbrowser, even if it is not a web server? Maybe the browser can handle it, too?

Good luck
gnurl
0
 
LVL 33

Expert Comment

by:Dave Howe
ID: 34997523
effectively you ARE seeing it - its the line:

depth=1 /C=US/ST=California/L=San Jose/O=Company, Inc./OU=IT/CN=IT DEV CA/emailAddress=webmasters@company.com

however, if you want to see the full cert, add

-showcerts

to the command :)
0
 

Author Comment

by:beer9
ID: 34998288
Hi DaveHow, I tried with -showcerts but still getting the same error.

verify error:num=19:self signed certificate in certificate chain
verify return:0
29827:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure:s3_pkt.c:1102:SSL alert number 40
29827:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188:

Open in new window

0
 
LVL 33

Accepted Solution

by:
Dave Howe earned 500 total points
ID: 35002055
odd, just did
openssl -connect 127.0.0.1:143 -showcerts
here and it worked perfectly. try with -debug instead to see if that gives any further information?
0
 

Author Closing Comment

by:beer9
ID: 35059621
Thank you! :-)
0

Featured Post

How to improve team productivity

Quip adds documents, spreadsheets, and tasklists to your Slack experience
- Elevate ideas to Quip docs
- Share Quip docs in Slack
- Get notified of changes to your docs
- Available on iOS/Android/Desktop/Web
- Online/Offline

Join & Write a Comment

We've all had that page pop up telling us there is a problem with the certificate and some of us continue on anyways and others run away to a safer competing site.  But what to do when you get the error - is it your problem or theirs?  What can you …
SSL stands for “Secure Sockets Layer” and an SSL certificate is a critical component to keeping your website safe, secured, and compliant. Any ecommerce website must have an SSL certificate to ensure the safe handling of sensitive information like…
Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now