检查服务器证书,ssl-用于检查服务器是否提供证书的OpenSSL命令

我试图运行openssl命令来缩小尝试从我们的系统发送出站消息时SSL问题的范围。

我在另一个主题中找到了此命令：使用openssl从服务器获取证书

openssl s_client -connect ip:port -prexit

此输出结果为

CONNECTED(00000003)

15841:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188:

---

no peer certificate available

---

No client certificate CA names sent

---

SSL handshake has read 0 bytes and written 121 bytes

---

New, (NONE), Cipher is (NONE)

Secure Renegotiation IS NOT supported

Compression: NONE

Expansion: NONE

---

这是否意味着服务器不提供任何证书？ 我在其他ip：port上尝试了其他系统，它们成功提交了证书。

相互认证是否会通过-prexit影响此命令？

-更新-

我再次执行命令

openssl s_client -connect ip:port -prexit

我现在得到这个回应

CONNECTED(00000003)

write:errno=104

---

no peer certificate available

---

No client certificate CA names sent

---

SSL handshake has read 0 bytes and written 121 bytes

---

New, (NONE), Cipher is (NONE)

Secure Renegotiation IS NOT supported

Compression: NONE

Expansion: NONE

---

我在命令中添加了-ssl3

openssl s_client -connect ip:port -prexit -ssl3

响应：

CONNECTED(00000003)

write:errno=104

---

no peer certificate available

---

No client certificate CA names sent

---

SSL handshake has read 0 bytes and written 0 bytes

---

New, (NONE), Cipher is (NONE)

Secure Renegotiation IS NOT supported

Compression: NONE

Expansion: NONE

SSL-Session:

Protocol : SSLv3

Cipher : 0000

Session-ID:

Session-ID-ctx:

Master-Key:

Key-Arg : None

Krb5 Principal: None

Start Time: 1403907236

Timeout : 7200 (sec)

Verify return code: 0 (ok)

---

还尝试-tls1

CONNECTED(00000003)

write:errno=104

---

no peer certificate available

---

No client certificate CA names sent

---

SSL handshake has read 0 bytes and written 0 bytes

---

New, (NONE), Cipher is (NONE)

Secure Renegotiation IS NOT supported

Compression: NONE

Expansion: NONE

SSL-Session:

Protocol : TLSv1

Cipher : 0000

Session-ID:

Session-ID-ctx:

Master-Key:

Key-Arg : None

Krb5 Principal: None

Start Time: 1403907267

Timeout : 7200 (sec)

Verify return code: 0 (ok)

---