nanog mailing list archives

Re: FIXED - Re: Broken SSL cert caused by router?


From: Matt Palmer <mpalmer () hezmatt org>
Date: Sun, 29 Mar 2015 07:50:24 +1100

On Sat, Mar 28, 2015 at 09:05:38AM -0700, Mike wrote:
On 03/27/2015 10:34 AM, Frank Bulk wrote:
Glad you figured that out.

I've used three SSL evaluation websites to help me with intermediate certificate issues:
https://www.ssllabs.com/ssltest/analyze.html (will show the names and details of the certs, missing or not
https://www.wormly.com/test_ssl (quick SSL tester, will point out if intermediate certificate is missing)
https://www.digicert.com/help/ (will show a green chain link between certs when they're all there *and* in order)

I went back to Frank's list and did some additional testing. I have a
different server which was set up the same way as the previous one
discussed, and I thought I would use the above tools and see if my problem
would have been identified by any of them. I am sorry to report, no, none of
these either caught the problem either.

Are you able to share the URL of the misconfigured site?  It would be
interesting to examine exactly what's going on.

- Matt

-- 
The main advantages of Haynes and Chilton manuals are that they cost $15,
where the factory manuals cost $100 and up, and that they will tell you how
to use two hammers, a block of wood, and a meerkat to replace "special tool
no. 2-112-A"    -- Matt Roberds in asr.


Current thread: