我应该怎么做才能知道SSL是否在工作？

我正在与NGINX合作，我只是build立了一个域和子域，我需要两个SSL。

查看子域的服务器块

server { listen 80; listen 443 ssl; server_name www.desktop.just4bettors.mobi desktop.just4bettors.mobi; root /home/c0pt/capilleira/capilleiraclickandgambleweb/dist; ssl_certificate /etc/ssl/certs/just4bettors.mobi.chained.crt; ssl_certificate_key /etc/ssl/private/just4bettors.mobi.key; ssl_session_cache shared:SSL:1m; ssl_session_timeout 5m; ssl_ciphers HIGH:!aNULL:!MD5; ssl_prefer_server_ciphers on; location / { index index.html index.htm; ... } }

如果我进入该子域，一切工作都会进行，但是，我应该如何知道SSL是否已经build立？

您可以运行以下testing：

telnet $server_ip 443

这会告诉你是否有在该端口监听的东西

 telnet desktop.just4bettors.mobi 443 Trying xxx.xxx.xx.xxx... Connected to desktop.just4bettors.mobi. Escape character is '^]'. ^] telnet> q Connection closed.

openssl s_client -connect $server_ip:443 -showcerts

这实际上会查询服务并检索证书，您应该也可以使用openssl来检查信任链。

 openssl s_client -connect desktop.just4bettors.mobi:443 CONNECTED(00000003) depth=3 C = US, O = "The Go Daddy Group, Inc.", OU = Go Daddy Class 2 Certification Authority verify return:1 depth=2 C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", CN = Go Daddy Root Certificate Authority - G2 verify return:1 depth=1 C = US, ST = Arizona, L = Scottsdale, O = "GoDaddy.com, Inc.", OU = http://certs.godaddy.com/repository/, CN = Go Daddy Secure Certificate Authority - G2 verify return:1 depth=0 OU = Domain Control Validated, CN = *.just4bettors.mobi verify return:1 --- Certificate chain 0 s:/OU=Domain Control Validated/CN=*.just4bettors.mobi i:/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2 1 s:/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2 i:/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./CN=Go Daddy Root Certificate Authority - G2 2 s:/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./CN=Go Daddy Root Certificate Authority - G2 i:/C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority 3 s:/C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority i:/C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority --- Server certificate -----BEGIN CERTIFICATE----- xxxxx

使用SSL Labs提供的第三方服务

您可以通过https://www.ssllabs.com/ssltest/传递您的域名，它会testing您的网站，并发回详细的结果。 像波纹pipe：

在这里输入图像说明