Test SSL/TLS connection
Protocol | Port |
---|---|
HTTPS | 443 |
IMAPS | 993 |
IMAP STARTTLS | 143 |
POP3S | 995 |
SMTPS | 465 |
SMTP STARTTLS | 587 |
Option | Description |
---|---|
-showcerts | Show full chain certificate |
-servername <SNI> | Set TLS SNI |
-verify_return_error | Stop if verification errors |
openssl s_client [<options>] -connect <host>:<port>
Show TLS certificate
openssl s_client -connect <host>:<port> [-servername <SNI>] | openssl x509 [-noout] [-text]
openssl s_client -connect example.org:443 -servername example.org | openssl x509 -noout -text
Test SMTP / IMAP StartTLS
openssl s_client -starttls { smtp | imap | pop3 } -showcerts -connect <host>:<port> -servername <domain>
openssl s_client -starttls smtp -showcerts -connect example.org:587 -servername example.org