我正在对与 EPP 服务器建立安全连接的错误进行故障排除。我发出下面的命令并看到所有服务器证书都已验证,但仍然出现错误(以粗体突出显示)。验证服务器的证书是否仍然存在问题?如果是这样,那可能是什么?
编辑:我剪掉了“可接受的客户端证书 CA 名称”,因为垃圾邮件检测器不喜欢它们。
$ openssl s_client -connect otessl.verisign-grs.com:700 -key /home/ubuntu/foo.key -cert /home/ubuntu/foo.crt -CAfile /home/ubuntu/foo-cert-chain.pem -CApath /etc/ssl/certs
CONNECTED(00000003)
depth=3 C = US, O = "VeriSign, Inc.", OU = Class 3 Public Primary Certification Authority
verify return:1
depth=2 C = US, O = "VeriSign, Inc.", OU = VeriSign Trust Network, OU = "(c) 2006 VeriSign, Inc. - For authorized use only", CN = VeriSign Class 3 Public Primary Certification Authority - G5
verify return:1
depth=1 C = US, O …
Run Code Online (Sandbox Code Playgroud)