使用openssl从服务器获取证书

本文翻译自：Using openssl to get the certificate from a server

I am trying to get the certificate of a remote server, which I can then use to add to my keystore and use within my java application. 我正在尝试获取远程服务器的证书，然后我可以使用它来添加到我的密钥库并在我的java应用程序中使用。

A senior dev (who is on holidays :( ) informed me I can run this: 一位资深开发者（节假日:(））告诉我，我可以运行这个：

openssl s_client -connect host.host:9999

To get a raw certificate dumped out, which I can then copy and export. 要获取原始证书，我可以将其复制并导出。 I receive the following output: 我收到以下输出：

depth=1 /C=NZ/ST=Test State or Province/O=Organization Name/OU=Organizational Unit Name/CN=Test CA
verify error:num=19:self signed certificate in certificate chain
verify return:0
23177:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure:s3_pkt.c:1086:SSL alert number 40
23177:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188:

I have also tried with this option 我也试过这个选项

-showcerts 

and this one (running on debian mind you) 而这一个（在debian上运行你的头脑）

-CApath /etc/ssl/certs/ 

But get the same error. 但得到同样的错误。<