Testing TLS/SSL connectivity (WIP)

[alberttwong]

Here is an example.

atwong@Alberts-MacBook-Pro-3 secrets % openssl s_client  -connect 559pe0t5f.cloud-app.celerdata.com:443
CONNECTED(00000005)
depth=2 C = US, O = Internet Security Research Group, CN = ISRG Root X1
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = R3
verify return:1
depth=0 CN = 559pe0t5f.cloud-app.celerdata.com
verify return:1
---
Certificate chain
 0 s:CN = 559pe0t5f.cloud-app.celerdata.com
   i:C = US, O = Let's Encrypt, CN = R3
   a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256
   v:NotBefore: Aug  8 16:47:24 2023 GMT; NotAfter: Nov  6 16:47:23 2023 GMT
 1 s:C = US, O = Let's Encrypt, CN = R3
   i:C = US, O = Internet Security Research Group, CN = ISRG Root X1
   a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256
   v:NotBefore: Sep  4 00:00:00 2020 GMT; NotAfter: Sep 15 16:00:00 2025 GMT
 2 s:C = US, O = Internet Security Research Group, CN = ISRG Root X1
   i:O = Digital Signature Trust Co., CN = DST Root CA X3
   a:PKEY: rsaEncryption, 4096 (bit); sigalg: RSA-SHA256
   v:NotBefore: Jan 20 19:14:03 2021 GMT; NotAfter: Sep 30 18:14:03 2024 GMT
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=CN = 559pe0t5f.cloud-app.celerdata.com
issuer=C = US, O = Let's Encrypt, CN = R3
---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 4557 bytes and written 415 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 2048 bit
This TLS version forbids renegotiation.
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
---
Post-Handshake New Session Ticket arrived:
SSL-Session:
    Protocol  : TLSv1.3
    Cipher    : TLS_AES_256_GCM_SHA384
    Session-ID: D6B6E79E5B82C99D0F3CBCC2E848B6B32A9E8F1AF71F1A38C6B54AC4C0985214
    Session-ID-ctx:
    Resumption PSK: 64C21AF2A2029BE97E4E34F63F702FD30784CB89C9BCE9E7AB0FE381919C5E5CD88AACDA7F58CE5CB9598CCBC4F052FF
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 300 (seconds)
    TLS session ticket:
    0000 - 98 68 f0 8c 60 df 09 af-a8 26 69 21 37 e7 49 66   .h..`....&i!7.If
    0010 - 0f 89 81 18 d6 64 fb 01-c6 24 29 5a ed 25 a6 6d   .....d...$)Z.%.m
    0020 - da d5 27 35 9b 62 f8 21-d2 9e 56 74 43 11 ed 76   ..'5.b.!..VtC..v
    0030 - ee 81 fb 2a a7 a5 bb e5-c8 dc 70 84 30 c9 80 02   ...*......p.0...
    0040 - c2 1d d0 8c 64 0d 5d 73-fd 08 3f 5a 03 2f 9b bf   ....d.]s..?Z./..
    0050 - 06 54 8d 7e 52 f2 b2 9c-2c ad 11 9a 63 35 c8 37   .T.~R...,...c5.7
    0060 - bc 0d 15 dd e7 17 d7 cb-85 c9 6a 79 9b 51 5c e6   ..........jy.Q\.
    0070 - 23 73 f7 68 cd 62 a3 26-31 ef 40 5c 79 e6 14 cd   #s.h.b.&1.@\y...
    0080 - cd 94 8b 4b 25 87 36 ff-bd 35 80 3d 35 f1 b6 5f   ...K%.6..5.=5.._
    0090 - 86 b4 99 f4 05 de 60 ae-d1 eb 88 7a 3b 87 ca dd   ......`....z;...
    00a0 - 36 19 5c 06 be 07 32 e8-cc 73 a7 25 dd f6 ee 4c   6.\...2..s.%...L
    00b0 - fd 50 c3 1d 02 e3 be f7-36 e4 50 f8 ed 21 e2 df   .P......6.P..!..
    00c0 - d3 2b 5c ba d1 b8 dd 75-76 a7 01 84 e1 c1 9f 8e   .+\....uv.......
    00d0 - 2c 31 64 f9 46 7b 4f c9-5c ee 63 10 1c 44 36 93   ,1d.F{O.\.c..D6.
    00e0 - e9 a8 8a 53 cc 18 63 95-98 36 fb d4 4c 09 3d 8b   ...S..c..6..L.=.
    00f0 - 92 d6 99 34 48 bc 42 c6-77 65 7b 62 01 06 b4 b1   ...4H.B.we{b....

    Start Time: 1691687129
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: no
    Max Early Data: 0
---
read R BLOCK
---
Post-Handshake New Session Ticket arrived:
SSL-Session:
    Protocol  : TLSv1.3
    Cipher    : TLS_AES_256_GCM_SHA384
    Session-ID: 6B66134F10B5AA54CCB7F74AED894C011D21232EE1A4EB685A5475778E71A2B0
    Session-ID-ctx:
    Resumption PSK: C25306CE0601C86A7F647770FE55B810A098A22622CED34F394844DEE869CAF3E1FC25B09F9162BCA9EE28A244FAF58A
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 300 (seconds)
    TLS session ticket:
    0000 - 98 68 f0 8c 60 df 09 af-a8 26 69 21 37 e7 49 66   .h..`....&i!7.If
    0010 - 84 e8 1a 74 2f 69 a8 36-34 6d 86 b7 a8 7f e8 6d   ...t/i.64m.....m
    0020 - 88 ec 28 5d 47 c6 fc b3-22 92 28 b6 60 af 65 9f   ..(]G...".(.`.e.
    0030 - 6e 60 39 e1 19 a7 85 6f-b2 aa 9d a7 39 26 c9 9e   n`9....o....9&..
    0040 - 17 87 e5 8e 90 ee e0 0b-97 35 2c 99 e6 b0 31 95   .........5,...1.
    0050 - 22 bb 4f f1 6c 11 93 6c-3a 36 17 ac 0c a7 1b 99   ".O.l..l:6......
    0060 - 5c eb 5d fd 64 70 5c a6-66 af a4 f0 ec eb fd d9   \.].dp\.f.......
    0070 - 37 a5 08 e6 e6 96 7e 6e-6c cc 4d 14 36 0c 01 a2   7.....~nl.M.6...
    0080 - ca a6 d3 c3 bf 23 9d ae-08 77 b3 16 33 25 33 87   .....#...w..3%3.
    0090 - 58 88 d3 55 cb df 63 21-35 7e aa bd c7 d9 e7 72   X..U..c!5~.....r
    00a0 - c0 97 6e fb a4 1b 8e 50-0d 25 97 dc cd 60 64 af   ..n....P.%...`d.
    00b0 - f7 54 52 f7 9b df 6d f1-cd 94 a2 3e dc 26 32 3a   .TR...m....>.&2:
    00c0 - 58 08 e7 c5 0e d8 02 df-c5 11 9b a0 31 f3 06 c4   X...........1...
    00d0 - 11 f3 e0 12 74 ad f1 ff-9b 69 bf 93 38 b8 1c 57   ....t....i..8..W
    00e0 - 89 24 a6 b5 c7 97 fe 91-1e e3 9c 35 be 32 07 70   .$.........5.2.p
    00f0 - 8e ac bc 06 32 57 6a 7b-5f 6f 62 3f cd 70 4c 5f   ....2Wj{_ob?.pL_

    Start Time: 1691687129
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: no
    Max Early Data: 0
---
read R BLOCK