Postman, curl, snow validation :
curl flag -k (insecure to ingore)
postman: settings -> SSL certification verification
SNOW cant turn off,
to ensure self signed certificate, ensure server certificate has subjectAlternativeName: host:"<IPADDR>" can match server IP
Then ensure curl has
-cacert fCA.crt for curl
curl --verbose can give detail handshake info
and postman -> settings -> certificate -> CA certificate
-----------------------------------------------
SNOW will validate server certifiate, subjectAltnerativeName, then rootCA(Java)
SNOW - no longer need server certificate to be prestored in certificates<if failed, upload>, however, need to store CA(if not known CA)'s cert in system
No comments:
Post a Comment