Re: How to test SSL cert from CA?

On Thu, Jul 9, 2015 at 9:29 PM, Francisco Reyes <lists(at)natserv(dot)net> wrote:

> On 07/09/2015 03:07 PM, Vick Khera wrote:
>
>>
>> On Wed, Jul 8, 2015 at 10:17 PM, Francisco Reyes <lists(at)natserv(dot)net
>> <mailto:lists(at)natserv(dot)net>> wrote:
>>
>> openssl s_client -connect HOST:PORT -CAfile /path/to/CA.pem
>>
>
> According to this post:
> http://serverfault.com/questions/79876/connecting-to-postgresql-with-ssl-using-openssl-s-client?rq=1
>
> one can not use openssl to test ssl connection to postgresql. True?

If you think the problem might be with the certificate itself, then take
postgresql out of the loop entirely by installing that certificate to be
used by apache (for instance) instead of by postgresql. Then use s_client
against apache.

Cheers,

Jeff