본문 바로가기

보안/유틸리티

openssl SSL/TLS 테스트 방법

  • openssl RSA Test
    • openssl Server Setting
      • SSL Class2
        s_server -accept 4433 -cert D:\CrossCert\Project\CrossSSL\ProjectSource\sample\TestServer\cert\server.der -key D:\CrossCert\Project\CrossSSL\ProjectSource\sample\TestServer\cert\serverkey.pem  -CAfile D:\CrossCert\Project\CrossSSL\ProjectSource\sample\TestServer\cert\rootca.der -CAfile D:\CrossCert\Project\CrossSSL\ProjectSource\sample\TestServer\cert\ca.der -tls1 -tlsextdebug -no_dhe -msg
      • SSL Class3
        s_server -accept 4433 -Verify 2 -cert D:\CrossCert\Project\CrossSSL\ProjectSource\sample\TestServer\cert\server.der -key D:\CrossCert\Project\CrossSSL\ProjectSource\sample\TestServer\cert\serverkey.pem  -CAfile D:\CrossCert\Project\CrossSSL\ProjectSource\sample\TestServer\cert\rootca.der -CAfile D:\CrossCert\Project\CrossSSL\ProjectSource\sample\TestServer\cert\ca.der -tls1 -tlsextdebug -no_dhe -msg
    • openssl Client Test
      • s_client -host 203.248.34.95 -port 4433 -tls1 -bugs
      • s_client -host 203.248.34.95 -port 4433 -cert user.pem -key userkey.pem -CAfile CA.pem -tls1 -tlsextdebug
      • s_client -host 203.248.34.95 -port 4433 -verify 0 -cert D:\CrossCert\Project\CrossSSL\ProjectSource\sample\TestServer\cert\client.der -key D:\CrossCert\Project\CrossSSL\ProjectSource\sample\TestServer\cert\clientkey.pem  -CAfile D:\CrossCert\Project\CrossSSL\temp\cert\ca.crt -tls1 -tlsextdebug -msg
  • openssl ECC Certificate Test
    • openssl Server Setting
      • s_server -accept 4433 -verify 0 -cert D:\CrossCert\Project\CrossSSL\temp\cert\server.crt -key D:\CrossCert\Project\CrossSSL\temp\cert\server.key  -CAfile D:\CrossCert\Project\CrossSSL\temp\cert\ca.crt -CAfile D:\CrossCert\Project\CrossSSL\temp\cert\rootca.crt -tls1 -tlsextdebug
    • openssl Client Test
      • s_client -host 203.248.34.95 -port 4433 -tls1 -bugs -verify 0
      •  s_client -host 203.248.34.95 -port 4433 -verify 0 -cert D:\CrossCert\Project\CrossSSL\temp\cert\client.crt -key  D:\CrossCert\Project\CrossSSL\temp\cert\client.key  -CAfile D:\CrossCert\Project\CrossSSL\temp\cert\ca.crt -CAfile D:\CrossCert\Project\CrossSSL\temp\cert\rootca.crt -tls1 -tlsextdebug