Quiz: TLS

One correct answer

ssl_certificate now points to a file made by cat app.crt lab-issuing-ca.crt, and nginx has reloaded. What will openssl s_client -connect app.lab.test:443 </dev/null 2>/dev/null | grep -A1 ' s:' print?

• A Two pairs: 0 s: app.lab.test with issuer Lab Issuing CA, and 1 s: Lab Issuing CA with issuer Lab Root CA.
• B Two pairs, but Lab Issuing CA is number 0.
• C One pair, as before the edit: the client takes the intermediate from its store.
• D Three pairs — up to and including Lab Root CA.