Configuration

elitenel
Regular Visitor

Configuration

Guys can someone please help me becuase the agents are not guiding me. My server is running and I want to ping the server. 2 ways ssl had been configured on my server.
2 REPLIES 2
SyedSa
Community Moderator

Re: Configuration

Hi @elitenel, Thank you for reaching out. An agent will get back to you as soon as possible. Until then, if any community member has information that may be helpful, feel free to reply in this thread.

API_Products
Visa Developer Support Specialist

Re: Configuration

Hey @elitenel,

 

To ping your server and verify that two-way SSL (mutual SSL) is configured correctly, you can use the following methods:

 

Method 1: Using `curl`

You can use the `curl` command to test the server's SSL configuration. Make sure you have the client certificate, client key, and CA certificate available.

```sh
curl --cert /path/to/client-cert.pem --key /path/to/client-key.pem --cacert /path/to/ca-cert.pem https://your-server-url
```

 

Method 2: Using `openssl`

You can also use the `openssl` command to test the SSL configuration.

```sh
openssl s_client -connect your-server-url:443 -cert /path/to/client-cert.pem -key /path/to/client-key.pem -CAfile /path/to/ca-cert.pem
```

 

Additional Troubleshooting Steps

1. Check Server Logs: Review the server logs to ensure that the SSL handshake is successful and there are no errors during the connection.
2. Verify Certificates: Ensure that the client certificate, client key, and CA certificate are valid and correctly configured.
3. Check Firewall Settings: Ensure that the server's firewall settings allow incoming connections on the port used for HTTPS (typically port 443).

 

Example `curl` Command

```sh
curl --cert /path/to/client-cert.pem --key /path/to/client-key.pem --cacert /path/to/ca-cert.pem https://your-server-url
```

 

Example `openssl` Command

```sh
openssl s_client -connect your-server-url:443 -cert /path/to/client-cert.pem -key /path/to/client-key.pem -CAfile /path/to/ca-cert.pem
```




Thanks,

Diana



Was your question answered? Don't forget to click on "Accept as Solution" to help other devs find the answer to the same question.