Linux SSL

• сайт рассказывающий про технические детали SSL TLS https://tls.dxdt.ru
• Управление сертификатами - https://github.com/cloudflare/cfssl
• книга все что нужно знать - TLS Mastery

 ssh-keygen -l -f ./id_rsa_1.pub
4096 SHA256:XXXXXXXXXXXXXXXXXXXXXXXXXXX8 m@domain.ru (RSA)
 
 openssl pkey -in ./id_rsa_1.pub -noout -text

# проверить установление соединение - можно указать версию -tls1 -tls1_2
openssl s_client -servername ip2u.ru -tlsextdebug  -connect ip2u.ru:443
 
wget -v --debug https://127.0.0.1:443 --header "Host: wiki.ip2u.net"
 
# -k insecure
curl -v -H 'Host: wiki.ip2u.ru' https://127.0.0.1:443/something 
 
# CURL проверить корректность установки сертификата
date; curl -vIs4 https://wiki.ip2u.ru 2>&1 | egrep -i "(connected|* ssl|issuer|subject)"
Sat Jun 11 19:31:48 +05 2022
* Connected to wiki.ip2u.ru (172.67.198.111) port 443 (#0)
* SSL connection using TLSv1.2 / ECDHE-ECDSA-CHACHA20-POLY1305
*  subject: CN=*.ip2u.ru
*  subjectAltName: host "wiki.ip2u.ru" matched cert's "*.ip2u.ru"
*  issuer: C=US; O=Let's Encrypt; CN=E1
*  SSL certificate verify ok.
 
# проверить сертификат на origin server cloudflare 
curl -svo /dev/null --resolve wiki.ip2u.ru:443:212.237.56.234 https://wiki.ip2u.ru/
* Added wiki.ip2u.ru:443:212.237.56.234 to DNS cache
* Hostname wiki.ip2u.ru was found in DNS cache
*   Trying 212.237.56.234:443...
* TCP_NODELAY set
* Connected to wiki.ip2u.ru (212.237.56.234) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: /etc/ssl/certs
} [5 bytes data]
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
} [512 bytes data]
* TLSv1.3 (IN), TLS handshake, Server hello (2):
{ [122 bytes data]
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
{ [25 bytes data]
* TLSv1.3 (IN), TLS handshake, Certificate (11):
{ [1321 bytes data]
* TLSv1.3 (OUT), TLS alert, unknown CA (560):
} [2 bytes data]
* SSL certificate problem: unable to get local issuer certificate
* Closing connection 0