L16 · IDENTITY AND TRUST
Watch validation fail
Visit lab hosts with an expired, a misnamed and an untrusted certificate, and read each failure.
Planned
Steps
Open the lab host whose certificate has expired.
What the server will check: Nothing to check. Your browser reports the failure.
Open the lab host whose certificate names a different site.
What the server will check: Nothing to check. Compare the error with the previous one.
Open the lab host whose certificate chains to a root your system does not trust.
What the server will check: Nothing to check. Read why the chain was rejected.
When it opens
This lab is planned. It opens when these are in place:
- Dedicated lab hostnames with deliberately invalid certificates
This will be a guided exercise on deliberately broken hosts that serve nothing else.