> For intensive SSL and cert debugging i also use the "openssl s_client"
+1 In particular, the following is a very useful command: openssl s_client -connect your.host.fr:443 -showcerts If you don't see the certificate chain you expect, then the order of certs in your .pem file is incorrect. M -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
