Zum Inhalt springen

Diskussion:TLS/Zertifikat überprüfen: Unterschied zwischen den Versionen

Aus Foxwiki
Die Seite wurde neu angelegt: „= TMP = ==Using online checkers== ===Check SSL using online tools=== * [https://www.htbridge.com/ssl/ ImmuniWeb® SSLScan] * [https://www.sslshopper.com/ssl-checker.html SSL Checker - SSL Certificate Verify] * [https://www.ssllabs.com/ssltest/ SSL Server Test (Powered by Qualys SSL Labs)] ===Using a Linux server=== * Any Linux server can be used for these tests. If you do not have a Linux server, use the online checkers above. * To verify SSL, connect t…“
 
K Textersetzung - „ “ durch „ “
 
Zeile 21: Zeile 21:
==== POP3 via SSL uses port 995 ====
==== POP3 via SSL uses port 995 ====
Connect to a mail server using openssl:  
Connect to a mail server using openssl:  
  openssl s_client -showcerts -connect mail.example.com:995 -servername mail.example.com
  openssl s_client -showcerts -connect mail.example.com:995 -servername mail.example.com
Check output and make sure that a valid certificate is shown:
Check output and make sure that a valid certificate is shown:
  Server certificate
  Server certificate
Zeile 31: Zeile 31:
====SMTP via SSL uses port 465====
====SMTP via SSL uses port 465====
Connect to a mail server using openssl:
Connect to a mail server using openssl:
  openssl s_client -showcerts -connect mail.example.com:465 -servername mail.example.com
  openssl s_client -showcerts -connect mail.example.com:465 -servername mail.example.com
Check output and make sure that a valid certificate is shown:
Check output and make sure that a valid certificate is shown:
  Server certificate
  Server certificate
Zeile 39: Zeile 39:
Make sure that you received SMTP server response:
Make sure that you received SMTP server response:
  220 mail.example.com ESMTP Postfix
  220 mail.example.com ESMTP Postfix
   
 
==== SMTP via TLS/StartTLS uses port 25 or 587 ====
==== SMTP via TLS/StartTLS uses port 25 or 587 ====
Connect to a mail server using openssl:
Connect to a mail server using openssl:
  openssl s_client -starttls smtp -showcerts -connect mail.example.com:25 -servername mail.example.com
  openssl s_client -starttls smtp -showcerts -connect mail.example.com:25 -servername mail.example.com


Check output and make sure that a valid certificate is shown:
Check output and make sure that a valid certificate is shown:

Aktuelle Version vom 14. Juni 2026, 00:46 Uhr

TMP

Using online checkers

Check SSL using online tools

Using a Linux server

  • Any Linux server can be used for these tests. If you do not have a Linux server, use the online checkers above.
  • To verify SSL, connect to any Linux server via SSH and use the instructions below:

IMAP via SSL uses port 993

  • connect to a mail server using openssl:
openssl s_client -showcerts -connect mail.example.com:993 -servername mail.example.com

Check output and make sure that a valid certificate is shown:

Server certificate
subject=/OU=Domain Control Validated/OU=PositiveSSL/CN=mail.example.com
issuer=/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=PositiveSSL CA 2

Make sure that you received IMAP server response:

* OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA AUTH=CRAM-MD5 AUTH=PLAIN IDLE ACL ACL2=UNION] Courier-IMAP ready. Copyright 1998-2004 Double Precision, Inc. See COPYING for distribution information.

POP3 via SSL uses port 995

Connect to a mail server using openssl:

openssl s_client -showcerts -connect mail.example.com:995 -servername mail.example.com

Check output and make sure that a valid certificate is shown:

Server certificate
subject=/OU=Domain Control Validated/OU=PositiveSSL/CN=mail.example.com
issuer=/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=PositiveSSL CA 2

Make sure that you received POP3 server response:

+OK Hello there. <1793.1385684315@localhost.localdomain>

SMTP via SSL uses port 465

Connect to a mail server using openssl:

openssl s_client -showcerts -connect mail.example.com:465 -servername mail.example.com

Check output and make sure that a valid certificate is shown:

Server certificate
subject=/OU=Domain Control Validated/OU=PositiveSSL/CN=mail.example.com
issuer=/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=PositiveSSL CA 2

Make sure that you received SMTP server response:

220 mail.example.com ESMTP Postfix
  

SMTP via TLS/StartTLS uses port 25 or 587

Connect to a mail server using openssl:

openssl s_client -starttls smtp -showcerts -connect mail.example.com:25 -servername mail.example.com

Check output and make sure that a valid certificate is shown:

Server certificate
subject=/OU=Domain Control Validated/OU=PositiveSSL/CN=mail.example.com
issuer=/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=PositiveSSL CA 2

Make sure that you received SMTP server response:

250 DSN