Mysql – How to fix Logjam vulnerability with MySQL

Use the -showcerts option to the openssl s_client command. It prints out the entire chain of server-provided certificates rather than just the server certificate (it shows the intermediates too). In your case the error indicates simply that you've failed to install the requisite intermediate certificate along with the server certificate. As the previous poster mentioned, you must concatenate the server and intermediate certificates - actually as a best practice, tack on the root certificate too, so that the server will present the entire chain rather than just the leaf certificate standing alone. The server certificate cannot stand alone because the intermediate is not particularly trusted, rather only the root certificates are trusted. You must trace fully back to one of these. Once you have everything chained properly, the openssl s_client test will either indicate "self signed certificate in chain" OR "verified ok", but not "unable to find local issuer certificate" - that is at least if you tie in the root certificate too, which is as I've recommended.

You need to apply an update to your NetScaler hosts as described in Citrix security bulletin CTX123359.

Appliance firmware version 8.1, build 68.7 or later, and version 9.1, build 99.8 or later.