Verifying unknown certs

["Robert G. (Doc) Savage" <dsavage@peaknet.net>]

For many of us the Internet Storm Center (http://isc.sans.org) is a favorite tab to keep open in a browser. This morning we got a bonus reason:

http://isc.sans.org/diary.html?storyid=8686

When we see an untrusted certificate message it's usually because of something local we're already aware of. We normally blow right through that roadblock because (a) we're "pretty sure" it's OK, and (b) we don't know how to check it out properly anyway. This link provides a detailed walk-through for (b) using OpenSSL.

--Doc