[179080] in North American Network Operators' Group
Re: FIXED - Re: Broken SSL cert caused by router?
daemon@ATHENA.MIT.EDU (ML)
Fri Mar 27 12:52:20 2015
X-Original-To: nanog@nanog.org
Date: Fri, 27 Mar 2015 12:52:21 -0400
From: ML <ml@kenweb.org>
To: nanog@nanog.org
In-Reply-To: <55158690.8020500@tiedyenetworks.com>
Errors-To: nanog-bounces@nanog.org
I believe the SSLLabs Analyzer should have pointed out an "Extra
Download" in the cert chain. That was the hint that there was an
intermediate cert that a client would have to go find on it's own
because it wasn't included with your server cert.
https://community.qualys.com/thread/12831
On 3/27/2015 12:34 PM, Mike wrote:
>
>
> On 03/27/2015 08:43 AM, Josh Luthman wrote:
>> FFR you can use this to verify the site itself is good or not:
>>
>> https://www.sslshopper.com/ssl-checker.html (there are others, this
>> is just what I have bookmarked)
>>
>
> Thanks. Previously while diagnosing this however, I used some others
> similar and they all were saying I was ok. For example,
> https://www.ssllabs.com/ssltest/analyze.html and one other I forget
> now. I am surprised this problem was not being pointed out.
>
>
>