4 ms·
Would love a tool that checks your website for these problems.
by matthewmueller 3y ago
Would love a tool that checks your website for these problems.
- jasoncartwright 3y agohttps://www.ssllabs.com/ssltest/ https://www.ssllabs.com/ssltest/
- wolfskaempf 3y agoYou’re in luck because such a tool exists :) https://testssl.sh/ https://testssl.sh/
- creshal 3y agohttps://www.ssllabs.com/ https://www.ssllabs.com/ covers most (if not all?) server-side problems.
- deleted 3y ago[deleted]
- loloquwowndueo 3y agoI use sslcheck for this. https://pypi.org/project/sslcheck/ https://pypi.org/project/sslcheck/ Badssl is good to see how clients react to a badly configured certificate, which is a different thing from checking whether your certificate or web site are badly configured.
- efortis 3y agohttps://Hardenize.com https://Hardenize.com Its founder, Ivan Ristić, has nice books as well.
- stayallive 3y agoI felt the same so I've built https://cert.chief.app https://cert.chief.app. Also had to find another source for revoked test certificates for the homepage examples and found them here: https://www.ssl.com/sample-valid-revoked-and-expired-ssl-tls-certificates/ https://www.ssl.com/sample-valid-revoked-and-expired-ssl-tls.... The badssl ones are expired too which means they are no longer revoked since revocation only lasts the lifetime of the certificates, which makes sense of course.