Re: FIXED - Re: Broken SSL cert caused by router?

[Mike <mike-nanog () tiedyenetworks com>]

On 03/27/2015 10:34 AM, Frank Bulk wrote:
> Glad you figured that out.
>
> I've used three SSL evaluation websites to help me with intermediate certificate issues:
> https://www.ssllabs.com/ssltest/analyze.html (will show the names and details of the certs, missing or not
> https://www.wormly.com/test_ssl (quick SSL tester, will point out if intermediate certificate is missing)
> https://www.digicert.com/help/ (will show a green chain link between certs when they're all there *and* in order)
>
> Frank

I went back to Frank's list and did some additional testing. I have a 
different server which was set up the same way as the previous one 
discussed, and I thought I would use the above tools and see if my 
problem would have been identified by any of them. I am sorry to report, 
no, none of these either caught the problem either. Although I still do 
not fully understand the dependencies involved, it seems that if my 
server was failing to supply the full certificate chain, and the browser 
was compensating for it by (attempting?) to load the missing certificate 
from elsewhere,  and this Meraki router was somehow able to confound 
that process, that would be an issue worthy of exploring more. I 
certainly don't blame these ssl check sites but clearly theres more 
checks needed.

Mike-