SSL 故障分析

openssl s_client -connect host0:port0 2>&1 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p'

openssl verify foo.pem

openssl s_client  -connect host0:port0 -state -showcerts

解码根证书
openssl x509 -text -in roch.pem