View certificate on client

Use this forum if you have installed hMailServer and want to ask a question related to a production release of hMailServer. Before posting, please read the troubleshooting guide. A large part of all reported issues are already described in detail here.
Post Reply
veinstix
New user
New user
Posts: 7
Joined: 2018-01-23 05:36

View certificate on client

Post by veinstix » 2020-03-04 08:05

What are some ways to see which certificate is live on the mail server? I've updated the SSL certificates in hmailserver and gave it a restart. Just switched from comodo to let's encrypt and want to be positive it's working properly before comodo fully expires.

mikedibella
Normal user
Normal user
Posts: 230
Joined: 2016-12-08 02:21

Re: View certificate on client

Post by mikedibella » 2020-03-04 10:40

I use...

For SSL ports:

openssl s_client -connect hostname:port -showcerts

For TLS (i.e. STARTTLS) ports:

openssl s_client -connect hostname:port -starttls smtp -showcerts
openssl s_client -connect hostname:port -starttls imap -showcerts
openssl s_client -connect hostname:port -starttls pop3 -showcerts

Review the protocol trace output and verify that the intermediate certificates are sent.

Post Reply