openssl 命令

测试加密套件 -cipher
[root@i-3pedyvud ~]# openssl s_client -connect jinke.innovkids.com:443 -tls1_2 -cipher 3DES

测试加密套件握手

[root@i-3pedyvud 123]# openssl s_client -connect abc.gkmang.cn:8999 -CAfile /etc/pki/tls/cert.pem -tls1_2 -cipher ECDHE-RSA-AES256-GCM-SHA384
CONNECTED(00000003)
depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA
verify return:1
depth=1 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = Encryption Everywhere DV TLS CA - G1
verify return:1
depth=0 CN = abc.gkmang.cn
verify return:1
---
Certificate chain
 0 s:/CN=abc.gkmang.cn
   i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=Encryption Everywhere DV TLS CA - G1
 1 s:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=Encryption Everywhere DV TLS CA - G1
   i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root CA
---
Server certificate
-----BEGIN CERTIFICATE-----
MIIF7zCCBNegAwIBAgIQBEgnu76airB6pfGqcMR15jANBgkqhkiG9w0BAQsFADBu
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMS0wKwYDVQQDEyRFbmNyeXB0aW9uIEV2ZXJ5d2hlcmUg
RFYgVExTIENBIC0gRzEwHhcNMjExMTExMDAwMDAwWhcNMjIxMTExMjM1OTU5WjAY
MRYwFAYDVQQDEw1hYmMuZ2ttYW5nLmNuMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvszGl0IXDP/7JslTmJPKQ+3WgONIymQcj/gCJ94VBeWIPX6vvh9Z
iHeUIX8zDw/tdOGGv7lEc8D+eHz+JQUY6pRpZN013YcUUKJAXgMuzlDPVMnL1DGf
LBKBfsnDKntasZ+lQj+kEfHcznK3LPOcWgBPx+olqOzyFYEsmngyFgsdBnp5N6si
deOIdDdbqG6laZXknnMG8l01QZKOa7SKr1abSb3kTkVS5x8GdThxhHe/CpFUcb85
POiXDS0Z3cyqua+Rxnz+EY4E1Nryuknk5SuzG4gwiHP+HZUF1C33HxjoyfKcbJhM
T74J8sZxjuelAE9WTVL21Fj3qwJa9Hi5AQIDAQABo4IC3TCCAtkwHwYDVR0jBBgw
FoAUVXRPsnJP9WC6UNHX5lFcmgGHGtcwHQYDVR0OBBYEFGz4P79Yyzo8x5dTGJv8
wQSQu4p5MBgGA1UdEQQRMA+CDWFiYy5na21hbmcuY24wDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA+BgNVHSAENzA1MDMGBmeB
DAECATApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMw
gY