啟動(dòng)一個(gè)server:
$ openssl s_server -accept <port> -key path/to/server.key -cert path/to/server.pem
啟動(dòng)一個(gè)client:
$ openssl s_client -connect <hostname>:<port> -CAfile path/to/ca.pem
其他常用選項(xiàng):
- 指定cipher: -cipher AES128-SHA
- 指定TLS版本:-tls1_2