4 ms·
I didn't know about that command line invocation. Thanks a lot! That's just the UI side though. I'm wondering what is actually happening on the wire when I run
by xg15 4y ago
I didn't know about that command line invocation. Thanks a lot!
That's just the UI side though. I'm wondering what is actually happening on the wire when I run that command. Is there some TLS opcode which lets a client request certificate from the server?
- cipherboy 4y agoNah, no op code. You just open a regular connection and then terminate it. This forces the TLS server to auth (as the CLI OpenSSL lacks session resumption tickets).
- xg15 4y agoWell yes, but the whole point of this thread is servers which don't include intermediate certs in the regular handshake. The article says about this: > The website worked in other browsers because browsers silently cache intermediate TLS certificates that they've seen before, in addition to being willing to download them under the right circumstances. I understood that as "some clients can recover from that situation by either caching the certs from a previous handshake or somehow downloading them on their own". And I was curious about the last point.