SSL/TLS Issues

Tools

Curl

Curl can analylse the TLS connection and prodive some indication of issues.

# curl -k -nn -vvv https://path.to.roadrunner:<port> 

Openssl

The OpenSSL client can be use to run an indepth analysis of a TLS connection.

openssl s_client -msg -debug -security_debug_verbose -connect <path.to.roadrunner:<port>

TLS Handshake Error

References:
Walkthrough of a TLS Handshake

Things to Check:

• Check that system time on server and client are correct. NTP is recommended.
• Check that no man-in-the-middle like proxies, and gateways.
• Check that TLS/SSL is not blocked by firewall.
• Use Curl to check and debug TLS connection.
• Use openssl to debug handshake