![]() Openssl s_client -servername -connect /dev/null | openssl x509 -fingerprint -noout -in /dev/stdin Openssl must be told to send the necessary SNI request (add the switch -servername ) Does not work on Windows XP, even Internet Explorer 8 (because the support of this feature is not browser version dependent, it depends on SChannel system component which introduced the support of TLS SNI extension, starting from Windows Vista, not XP). Internet Explorer 7 or later, on Windows Vista or higher. The reason IE on Windows XP was getting the same certificate fingerprint as SSL Eye from was because neither supported Server Name Indication (SNI).īrowsers with support for TLS server name indication
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |