Differences

This shows you the differences between two versions of the page.

--- ubuntu:ssl:connect_to_an_ssl-enabled_service [2021/02/02 11:54] – peter
+++ ubuntu:ssl:connect_to_an_ssl-enabled_service [2021/02/02 12:01] (current) – [Print each high-level stage of a SSL-enabled service] peter
@@ Line 1: / Line 1: @@
 ====== Ubuntu - SSL - Connect to an SSL-enabled service ======
+<code bash>
+openssl s_client -connect mail.sharewiz.net:995
+</code>
+returns:
+<code bash>
+CONNECTED(00000003)
+[ ..... ]
+user ME
++OK Name is a valid mailbox
+pass SOMETHING_OR_ANOTHER
++OK Mailbox locked and ready
+list
++OK scan listing follows
+1225
+1863
+1668
+963
+1969
+1437
+2357
+3316
+3517
+8952
+9616
+quit
++OK
+</code>
+<WRAP info>
+**NOTE:**  The SSL and TLS connection setup process consists of four stages:
+  - The client and server negotiate security capabilities, such as the public-key algorithm, the symmetric key algorithm, and compression algorithms.
+  - The server transmits digital certificates and key information to the client, allowing the client to validate the identity of the server.
+  - The client exchanges key information with the server, and optionally authenticate itself with a digital certificate.
+  - The client and server use the negotiated parameters.
+</WRAP>
+----
+===== Print each high-level stage of a SSL-enabled service =====
 <code bash>
@@ Line 8: / Line 56: @@
 <code>
-SSL_connect:before/connect initialization
+SSL_connect:before SSL initialization
-SSL_connect:SSLv2/v3 write client hello A
+SSL_connect:SSLv3/TLS write client hello
-SSL_connect:error in SSLv2/v3 read server hello A
+SSL_connect:error in SSLv3/TLS write client hello
-SSL_connect:SSLv3 read server hello A
+SSL_connect:SSLv3/TLS write client hello
-SSL_connect:SSLv3 read server certificate A
+SSL_connect:SSLv3/TLS read server hello
-SSL_connect:SSLv3 read server key exchange A
+SSL_connect:SSLv3/TLS read server certificate
-SSL_connect:SSLv3 read server done A
+SSL_connect:SSLv3/TLS read server key exchange
-SSL_connect:SSLv3 write client key exchange A
+SSL_connect:SSLv3/TLS read server done
-SSL_connect:SSLv3 write change cipher spec A
+SSL_connect:SSLv3/TLS write client key exchange
-SSL_connect:SSLv3 write finished A
+SSL_connect:SSLv3/TLS write change cipher spec
-SSL_connect:SSLv3 flush data
+SSL_connect:SSLv3/TLS write finished
-SSL_connect:error in SSLv3 read finished A
+SSL_connect:error in SSLv3/TLS write finished
-SSL_connect:error in SSLv3 read finished A
+SSL_connect:SSLv3/TLS write finished
-SSL_connect:SSLv3 read finished A
+SSL_connect:SSLv3/TLS read server session ticket
-SSL handshake has read 1584 bytes and written 346 bytes
+SSL_connect:SSLv3/TLS read change cipher spec
+SSL_connect:SSLv3/TLS read finished
+SSL handshake has read 3101 bytes and written 402 bytes
 SSL-Session:
 </code>
+----