Play WS SSL のデバッグ

Play WS SSL でクライアント証明書が渡せているかを調べた際のメモ

Play Framework は 2.3.x 以上

conf/application.conf に以下を追加してアプリ再起動

ws.ssl.debug = [ "ssl", "trustmanager", "keymanager" ]

標準出力にSSLの情報のトレースがでている

サーバの証明書情報

*** ServerHello, TLSv1.2
RandomCookie:  GMT: 1428301896 bytes = { 111, 222, ..., 789 }
Session ID:  { 999, 888, ..., 123 }
Cipher Suite: TLS_ECDHE_RSA_WITH_RC4_128_SHA
Compression Method: 0
Extension renegotiation_info, renegotiated_connection: <empty>
Extension ec_point_formats, formats: [uncompressed, ansiX962_compressed_prime, ansiX962_compressed_char2]
***
%% Initialized:  [Session-1, TLS_ECDHE_RSA_WITH_RC4_128_SHA]
** TLS_ECDHE_RSA_WITH_RC4_128_SHA
New I/O worker #26, READ: TLSv1.2 Handshake, length = 3745
*** Certificate chain
chain [0] = [
[
  Version: V3
  Subject: CN=xxxx, OU=yyyy, O=hoge.com, L=Minato-ku, ST=Tokyo, C=JP
  Signature Algorithm: SHA1withRSA, OID = x.y.zzz.aaaaaa.b.c.d

  Key:  Sun RSA public key, 2048 bits
  modulus: 
123456...
  public exponent: 65537
  Validity: [From: Tue Jan 20 12:16:57 JST 2015,
               To: Wed Jan 20 23:59:00 JST 2016]

クライアントの証明書情報

*** ServerHelloDone
matching alias: 1
*** Certificate chain
chain [0] = [
[
  Version: V3
  Subject: CN=yyyy, OU=zzzzz, O=hoge.com, L=Minato-ku, ST=Tokyo, C=JP

参考