TLS/SSL Troubleshooting

The openssl command-line tool can be used as a generic TLS/SSL client which connects to a remote host using SSL/TLS.

It's Windows version can be downloaded at http://www.slproweb.com/products/Win32OpenSSL.html.

For example:

openssl s_client -host HOSTNAME -port PORT -cert hostcert.pfx

or

openssl.exe s_client -host HOSTNAME -port PORT -cert hostcert.pfx -CAfile trustedCertificates.crt

More details could be received using the -msg and -debug options.

The detailed description of this mode can be found at https://www.openssl.org/docs/manmaster/man1/s_client.html .

See Also

• How TLS/SSL Works. This article provides a detailed explanation of the SSL/TLS protocol, specifically the handshake protocol, its associated messages and alerts, and the record protocol.