%openssl s_client -connect localhost:7979 -cert server-cert.pem -key private-key.pem Can't use SSL_get_servername depth=0 C = US, ST = CA, L = Somewhere, O = Someone, CN = FoobarCA verify error:num=18:self signed certificate verify return:1 depth=0 C = US, ST = CA, L = Somewhere, O = Someone, CN = FoobarCA verify return:1 CONNECTED(00000004) --- Certificate chain 0 s:C = US, ST = CA, L = Somewhere, O = Someone, CN = FoobarCA i:C = US, ST = CA, L = Somewhere, O = Someone, CN = FoobarCA --- Server certificate -----BEGIN CERTIFICATE----- MIIDhzCCAm+gAwIBAgIUHhy3KXXJkdutRaw1FtXKGsiSSWUwDQYJKoZIhvcNAQEL BQAwUzELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAkNBMRIwEAYDVQQHDAlTb21ld2hl cmUxEDAOBgNVBAoMB1NvbWVvbmUxETAPBgNVBAMMCEZvb2JhckNBMB4XDTIxMDQx NTE5NTc0MloXDTIyMDQxNTE5NTc0MlowUzELMAkGA1UEBhMCVVMxCzAJBgNVBAgM AkNBMRIwEAYDVQQHDAlTb21ld2hlcmUxEDAOBgNVBAoMB1NvbWVvbmUxETAPBgNV BAMMCEZvb2JhckNBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0rP ArdMgt9zKgKbjU6jmTeZdlCk7a0VVIuln6RgQMbwxs/biUVsvJKPmlzVRsVbh7HO z4p+PO+30xV1HEzsTquiOmCY0qHwGA/JxZd9xpVQGWwCmuNFWSQ+qChdVpd8AzOJ 2P4ek1qaN6aAuhVaIHGJFqJy+IJFAAqjD4eAvO4s2m+Y0WEcaESBUL2qG6Hr2lqE GftJucj7r1P4adQ18Sg4LGfnjwJ9x4/f7XU9sRVB+VDe+eswDtr2Qj/wMA4VdeDN qWhgvINw15dupzuA0uGBtZWhfA5YjroXI0S2LXZOH6AvwasFLdNenpfUWNFtf4AQ gFNJ+zNKieUm40oiJwIDAQABo1MwUTAdBgNVHQ4EFgQUjSJqTGc2uaWQamkEE9LO vG0UwVAwHwYDVR0jBBgwFoAUjSJqTGc2uaWQamkEE9LOvG0UwVAwDwYDVR0TAQH/ BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAYw7iiC7HAhxU5wBGldi2db4wzYFO W7xx1AwzVcy2QdLV5pT2HkLkxYJf2xYshGuTCd5uLhlEDpG6ihjcn/pqumBkaQSo W2GKSy/AvJf5DL2NkiQe/XlT44gZZrot2Aa5KhskDFEIAve4pD2jCvoH4C3FZRLz Hr+Uxx2jhOl0iUp6HwhFqdc+7t1abGNXBIDcrZ4jQa3WRXdUM+vu9ZCucI4noI+q 5v7bXXt516traVc6UuipT+HUsy+bAlY2xqgzoEc9aBbNWYcoYJHcK9aOnsBjbd7Z met2gIeWYeuBLBrU/zgJvvvWiMhDO9WgvaOU4lMh57elg2SD3kDGzaacqA== -----END CERTIFICATE----- subject=C = US, ST = CA, L = Somewhere, O = Someone, CN = FoobarCA issuer=C = US, ST = CA, L = Somewhere, O = Someone, CN = FoobarCA --- No client certificate CA names sent Peer signing digest: SHA256 Peer signature type: RSA-PSS Server Temp Key: X25519, 253 bits --- SSL handshake has read 1463 bytes and written 373 bytes Verification error: self signed certificate --- New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384 Server public key is 2048 bit Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 18 (self signed certificate) --- Hello, world! read:errno=0 --- Post-Handshake New Session Ticket arrived: SSL-Session: Protocol : TLSv1.3 Cipher : TLS_AES_256_GCM_SHA384 Session-ID: E6200CF8157FF422DC6BF5832C68E1348486DEDEE1D4922EF0BD6A3F7B2AA5FF Session-ID-ctx: Resumption PSK: 1AA18EF8E85FDC28CF1454B532A7CE6A31D6381C5532A3985DCC4A789BC7866D5CAB2D69FDC2612CC5B2F4905E9845F8 PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 7200 (seconds) TLS session ticket: 0000 - 3e 60 33 7b 42 8b 78 0d-02 67 e7 98 95 23 61 6b >`3{B.x..g...#ak 0010 - 55 90 fd 19 e1 c7 50 e4-32 55 66 a8 52 1b c7 fa U.....P.2Uf.R... 0020 - 1e 45 36 1b 19 68 18 eb-b0 57 14 f2 11 e5 eb aa .E6..h...W...... 0030 - 7d e7 79 b6 91 a5 d5 cd-bc 32 1c 71 e2 f6 13 9f }.y......2.q.... 0040 - 82 24 93 9e cd 9a 5d a6-71 b2 9a 6c b1 c9 ae e4 .$....].q..l.... 0050 - 8c 9a 1b d3 18 6f 37 5b-26 ff c3 2f 0e a8 08 37 .....o7[&../...7 0060 - 3e d7 74 0d 75 81 80 28-50 96 c1 d6 71 ed f9 89 >.t.u..(P...q... 0070 - 0e 7e d5 cf 6d 39 ba 7f-e5 0f 86 c9 06 e7 27 af .~..m9........'. 0080 - a7 c1 f0 86 d6 89 f8 2a-a2 66 d3 20 f0 c7 e9 3e .......*.f. ...> 0090 - 69 dd 5c 5d 68 25 f1 2c-f3 f5 b8 5e d6 49 61 b3 i.\]h%.,...^.Ia. 00a0 - 8b 0a 66 e7 56 ad f3 e2-9e fa 10 e2 4e 6f 4d 22 ..f.V.......NoM" 00b0 - 49 b8 70 71 49 d9 29 38-11 9e 57 ad c8 33 81 0b I.pqI.)8..W..3.. Start Time: 1618517328 Timeout : 7200 (sec) Verify return code: 18 (self signed certificate) Extended master secret: no Max Early Data: 0 --- read R BLOCK --- Post-Handshake New Session Ticket arrived: SSL-Session: Protocol : TLSv1.3 Cipher : TLS_AES_256_GCM_SHA384 Session-ID: C16D25B1B0C77C9BB2D4FCD6EAAD1D29E37E1FE5DE3E85B95B360826C47442B7 Session-ID-ctx: Resumption PSK: C171283815582F3743316C24BF94F880841DCDBE5E963D8FF24E1024FAD0492613EC348E31F862DC7EF46E6774BFF4DD PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 7200 (seconds) TLS session ticket: 0000 - 3e 60 33 7b 42 8b 78 0d-02 67 e7 98 95 23 61 6b >`3{B.x..g...#ak 0010 - c1 dd df 35 1e 45 80 d6-16 bb ed c7 e5 25 c9 d2 ...5.E.......%.. 0020 - 35 e4 86 66 3d e2 6f e7-72 57 ab 47 41 85 ef cc 5..f=.o.rW.GA... 0030 - ef bd c8 b3 85 15 0a 53-cf b6 49 92 4e 2a c5 3d .......S..I.N*.= 0040 - 97 ee e6 d4 de ec 9f 5a-fd c6 f0 85 67 81 7c 49 .......Z....g.|I 0050 - 08 50 47 35 d2 61 42 97-cc ef b1 6f 58 0d 75 fc .PG5.aB....oX.u. 0060 - 06 dc c5 91 a1 30 43 51-78 82 7d 2a 7b cf 7d 03 .....0CQx.}*{.}. 0070 - 6d 36 6a d2 d2 88 57 24-b2 fd 4d 8f 4c 2a e6 9f m6j...W$..M.L*.. 0080 - 3c 54 31 d9 79 42 c3 45-32 ff 90 86 95 7e 42 4a