>_ life of a tormented sysadmin

• Testing OCSP stapling

  Posted on Mon 13 July 2015

  Today I was fiddling around with nginx and ssl options and wanted to verify that my server is actually serving OCSP data in its responses.

  Here is a simple bash one-liner, that does exactly that:

  openssl s_client -connect blog.foxxx0.de:443 -tls1  -tlsextdebug  -status <<<$(echo -en 'Host: blog.foxxx0 …

  ---

• Import CA certificates in Arch Linux

  Posted on Sun 12 July 2015

  As this process tends to be distribution-specific, here is how it is done in Arch Linux:

  1. Move your cert to /etc/ca-certificates/trust-source/anchors/
  2. Make sure it ends with .crt
  3. Run trust extract-compat

  That's it! :)

  ---

Page 1 / 1