| | 1 | = Download the SSL Certificate from a server == |
| | 2 | You can use {{{openssl}}} to find the signer of the SSL certificate. Use as the hostname the URL of the server: |
| | 3 | {{{ |
| | 4 | openssl s_client -showcerts -connect <HOSTNAME>:12369 |
| | 5 | }}} |
| | 6 | |
| | 7 | ''Note: if that command complains about a "self signed certificate in certificate chain", you can try with the debug and prexit flags'': |
| | 8 | {{{ |
| | 9 | openssl s_client -debug -prexit -showcerts -connect <HOSTNAME>:12369 |
| | 10 | }}} |
| | 11 | |
| | 12 | That command will yield the SSL certificate chain. The first one, "Certificate 0" (zero), is the actual SSL certificate. The second one, "Certificate 1", is the signer. That's the one you want. |
