What seems to be missing something is the wireshark output from Robert Dailey's output, my output looks as expected.
-bri On Mon, Jun 24, 2013 at 1:32 AM, <y-i...@secom.co.jp> wrote: > I see two certs with "-showcerts". > Am I missing something in your question? > > $ openssl s_client -connect 74.125.225.228:443 -showcerts > CONNECTED(00000003) > depth=1 C = US, O = Google Inc, CN = Google Internet Authority > verify error:num=20:unable to get local issuer certificate > verify return:0 > --- > Certificate chain > 0 s:/C=US/ST=California/L=Mountain View/O=Google Inc/CN=*.google.com > i:/C=US/O=Google Inc/CN=Google Internet Authority > -----BEGIN CERTIFICATE----- > MIIGKjCCBZOgAwIBAgIKN8910AABAACNYTANBgkqhkiG9w0BAQUFADBGMQswCQYD > SNIP > 5AhebqAAiSe0LKII29c2wIdCBzuKSSpgU5mkaRcsqtRd5cGLWWz22+DUaBEZUQ== > -----END CERTIFICATE----- > 1 s:/C=US/O=Google Inc/CN=Google Internet Authority > i:/C=US/O=Equifax/OU=Equifax Secure Certificate Authority > -----BEGIN CERTIFICATE----- > MIICsDCCAhmgAwIBAgIDFXfhMA0GCSqGSIb3DQEBBQUAME4xCzAJBgNVBAYTAlVT > MRAwDgYDVQQKEwdFcXVpZmF4MS0wKwYDVQQLEyRFcXVpZmF4IFNlY3VyZSBDZXJ0 > aWZpY2F0ZSBBdXRob3JpdHkwHhcNMTIxMjEyMTU1ODUwWhcNMTMxMjMxMTU1ODUw > WjBGMQswCQYDVQQGEwJVUzETMBEGA1UEChMKR29vZ2xlIEluYzEiMCAGA1UEAxMZ > R29vZ2xlIEludGVybmV0IEF1dGhvcml0eTCBnzANBgkqhkiG9w0BAQEFAAOBjQAw > gYkCgYEAye23pIucV+eEPkB9hPSP0XFjU5nneXQUr0SZMyCSjXvlKAy6rWxJfoNf > NFlOCnowzdDXxFdF7dWq1nMmzq0yE7jXDx07393cCDaob1FEm8rWIFJztyaHNWrb > qeXUWaUr/GcZOfqTGBhs3t0lig4zFEfC7wFQeeT9adGnwKziV28CAwEAAaOBozCB > oDAfBgNVHSMEGDAWgBRI5mj5K9KylddH2CMgEE8zmJCf1DAdBgNVHQ4EFgQUv8Aw > 6/VDET5nup6R+/xq2uNrEiQwEgYDVR0TAQH/BAgwBgEB/wIBADAOBgNVHQ8BAf8E > BAMCAQYwOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL2NybC5nZW90cnVzdC5jb20v > Y3Jscy9zZWN1cmVjYS5jcmwwDQYJKoZIhvcNAQEFBQADgYEAvprjecFG+iJsxzEF > ZUNgujFQodUovxOWZshcnDW7fZ7mTlk3zpeVJrGPZzhaDhvuJjIfKqHweFB7gwB+ > ARlIjNvrPq86fpVg0NOTawALkSqOUMl3MynBQO+spR7EHcRbADQ/JemfTEh2Ycfl > vZqhEFBfurZkX0eTANq98ZvVfpg= > -----END CERTIFICATE----- > > Isn't it what you are looking for? > -- > iida > >>showcerts wouldn't add anything useful. I just am trying to see the chain. >>The tcpdump is what seems to have only one cert. >> >>-bri > ... >>>You forgot "-showcerts". > ... >>>>$ openssl s_client -connect 74.125.225.228:443 >>>... >>>>I see one cert, but not the other. Is it just me? -- You received this message because you are subscribed to the Google Groups "Android Security Discussions" group. To unsubscribe from this group and stop receiving emails from it, send an email to android-security-discuss+unsubscr...@googlegroups.com. To post to this group, send email to android-security-discuss@googlegroups.com. Visit this group at http://groups.google.com/group/android-security-discuss. For more options, visit https://groups.google.com/groups/opt_out.
