Re: [CentOS] Testing dark SSL sites

2014-10-22 Thread Benjamin Smith
On Tuesday, October 21, 2014 07:28:13 PM Stephen Harris wrote: On Tue, Oct 21, 2014 at 04:17:25PM -0700, li...@benjamindsmith.com wrote: I've already confirmed for example, that using openssl s_client as you mention above doesn't actually check the certs, just lists them. Actually it does

Re: [CentOS] Testing dark SSL sites

2014-10-22 Thread Leon Fauster
Am 22.10.2014 um 20:14 schrieb Benjamin Smith li...@benjamindsmith.com: On Tuesday, October 21, 2014 07:28:13 PM Stephen Harris wrote: On Tue, Oct 21, 2014 at 04:17:25PM -0700, li...@benjamindsmith.com wrote: I've already confirmed for example, that using openssl s_client as you mention above

[CentOS] Testing dark SSL sites

2014-10-21 Thread lists
So, with all the hubbub around POODLE and ssl, we're preparing a new load balancer using HAProxy. So we have a set of unit tests written using PHPUnit, having trouble validating certificates. How do you test/validate an SSL cert for a prototype foo.com server if it's not actually active at

Re: [CentOS] Testing dark SSL sites

2014-10-21 Thread Travis Kendrick
On 10/21/2014 04:57 PM, li...@benjamindsmith.com wrote: So, with all the hubbub around POODLE and ssl, we're preparing a new load balancer using HAProxy. So we have a set of unit tests written using PHPUnit, having trouble validating certificates. How do you test/validate an SSL cert for a

Re: [CentOS] Testing dark SSL sites

2014-10-21 Thread Stephen Harris
On Tue, Oct 21, 2014 at 02:57:42PM -0700, li...@benjamindsmith.com wrote: So we have a set of unit tests written using PHPUnit, having trouble validating certificates. How do you test/validate an SSL cert for a prototype foo.com server if it's not actually active at the IP address that

Re: [CentOS] Testing dark SSL sites

2014-10-21 Thread lists
On Tuesday, October 21, 2014 06:07:29 PM Stephen Harris wrote: On Tue, Oct 21, 2014 at 02:57:42PM -0700, li...@benjamindsmith.com wrote: So we have a set of unit tests written using PHPUnit, having trouble validating certificates. How do you test/validate an SSL cert for a prototype foo.com

Re: [CentOS] Testing dark SSL sites

2014-10-21 Thread lists
On Tuesday, October 21, 2014 05:02:53 PM Travis Kendrick wrote: On 10/21/2014 04:57 PM, li...@benjamindsmith.com wrote: So, with all the hubbub around POODLE and ssl, we're preparing a new load balancer using HAProxy. So we have a set of unit tests written using PHPUnit, having trouble

Re: [CentOS] Testing dark SSL sites

2014-10-21 Thread Stephen Harris
On Tue, Oct 21, 2014 at 04:17:25PM -0700, li...@benjamindsmith.com wrote: I've already confirmed for example, that using openssl s_client as you mention above doesn't actually check the certs, just lists them. Actually it does check them as well. e.g. openssl s_client -connect localhost:443

Re: [CentOS] Testing dark SSL sites

2014-10-21 Thread Travis Kendrick
On 10/21/2014 06:24 PM, li...@benjamindsmith.com wrote: On Tuesday, October 21, 2014 05:02:53 PM Travis Kendrick wrote: On 10/21/2014 04:57 PM, li...@benjamindsmith.com wrote: So, with all the hubbub around POODLE and ssl, we're preparing a new load balancer using HAProxy. So we have a set

Re: [CentOS] Testing dark SSL sites

2014-10-21 Thread Travis Kendrick
On 10/21/2014 06:24 PM, li...@benjamindsmith.com wrote: On Tuesday, October 21, 2014 05:02:53 PM Travis Kendrick wrote: On 10/21/2014 04:57 PM, li...@benjamindsmith.com wrote: So, with all the hubbub around POODLE and ssl, we're preparing a new load balancer using HAProxy. So we have a set