Re: [openssl-users] Test SSL connection

2018-05-31 Thread Mark Shnaider via openssl-users
Hello Walter, I did not found file ca.pem (root certificate) for testing. Thanks Mark From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf Of Walter H. Sent: Wednesday, May 30, 2018 11:17 AM To: openssl-users@openssl.org Subject: Re: [openssl-users] Test SSL connection On

Re: [openssl-users] Test SSL connection

2018-05-30 Thread Viktor Dukhovni
> On May 30, 2018, at 4:06 PM, Jordan Brown > wrote: > > And also: the certificate is unlikely to list an IP address, so it should > fail hostname verification. You need to use a host name in your client > connection request, not an IP address. > > (Pretty much, you don't ever want to us

Re: [openssl-users] Test SSL connection

2018-05-30 Thread Jordan Brown
On 5/30/2018 1:16 AM, Walter H. wrote: > On 30.05.2018 08:45, Mark Shnaider via openssl-users wrote: >> [...] >> >> openssl s_client -connect 10.65.48.108:443 >> >> [...] > very probable, that the client doesn't have the root ca certificate of > the ca certificate that signed server.pem > > you sho

Re: [openssl-users] Test SSL connection

2018-05-30 Thread Walter H.
On 30.05.2018 08:45, Mark Shnaider via openssl-users wrote: Hello, I use OpenSSL version is openssl-1.1.0h(Windows) and I run following command from apps directory |openssl s_server -accept 443 -www| The server in this case use certificate "server.pem" On client computer I run command ope

[openssl-users] Test SSL connection

2018-05-30 Thread Mark Shnaider via openssl-users
Hello, I use OpenSSL version is openssl-1.1.0h(Windows) and I run following command from apps directory openssl s_server -accept 443 -www The server in this case use certificate "server.pem" On client computer I run command openssl s_client -connect 10.65.48.108:443 On client computer I get error