yogsototh/hs-tls
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add some debug info

Browse source
This commit is contained in:
Vincent Hanquez 2012-04-16 20:43:01 +01:00
parent 0871e47909
commit bf2f276c0c
1 changed files with 20 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
README.md
View file

@ -23,3 +23,23 @@ Features
* bulk algorithm supported: any stream or block ciphers.
* supported extensions: secure renegociation, next protocol negotiation (draft 2)
Common Issues
-------------
The tools mentioned below are all available from the tls-debug package.
* Certificate issues
It's useful to run the following command, which will connect to the destination and
retrieve the certificate chained used.
tls-retrievecertificate -d <destination> -p <port> -v -c
As an output it will print every certificates in the chain and will gives the issuer and subjects of each.
It creates a chain where issuer of certificate is the subject of the next certificate part of the chain:
(subject #1, issuer #2) -> (subject #2, issuer #3) -> (subject #3, issuer #3)
A "CA is unknown" error indicates that your system doesn't have a certificate in
the trusted store belonging to any of the node of the chain.