wiki:HowTo/GetAMSSLCert

Version 2 (modified by nriga@bbn.com, 10 years ago) (diff)

--

Download the SSL Certificate from a server

You can use openssl to find the signer of the SSL certificate. Use as the hostname the URL of the server:

openssl s_client -showcerts -connect <HOSTNAME>:12369

Note: if that command complains about a "self signed certificate in certificate chain", you can try with the debug and prexit flags:

openssl s_client -debug -prexit -showcerts -connect <HOSTNAME>:12369

That command will yield the SSL certificate chain. The first one, "Certificate 0" (zero), is the actual SSL certificate. The second one, "Certificate 1", is the signer. That's the one you want.