Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

The SSL certification limit is comming so I'd like to upgrade these certifications.

Is there any solutions that check the certifications withought server proxy's cache? We have to been under proxy environment.

How can I clear the cache?

share|improve this question

2 Answers 2

You can use the following to confirm it's valid from the website:

openssl s_client -connect <my url>:443

Or otherwise to verify the certificate chains on the file system before putting them on the website.

openssl verify [-CApath directory] cert.pem
share|improve this answer

Browsers are not too reliable a testing tool for ssl certificate verification any longer because browser writers have been bundling a lot of certificates into the browser's keystore--certificates that one doesn't necessarily expect to see there. cUrl and openssl still seem to be the most reliable tools for verification for me. Also, some Certificate Authorities provide their own verification tools but you're limited in that the site you're looking to check must be Internet accessible.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.