4 ms·
My weekend project. * Tries to give all the information you need instead of a rating. * Open source, so you can self host it. * Does the entire certificate c
by mdewinter 12y ago
My weekend project.
* Tries to give all the information you need instead of a rating.
* Open source, so you can self host it.
* Does the entire certificate chain.
* Allows to paste a CRL/Cert
* Validates the certificate, chain, CRL and OCSP (of every cert in the chain)
* Has easy copy-pastable PEM versions of certs
* Ciphersuite enumeration as an option.
* Fast.
- david_shaw 12y agoThis is pretty great (and you even managed to snag a short domain name)! For those who are trying to use the command line (rather than a webapp), "sslscan" performs these checks from a simple CLI tool.
- billyhoffman 12y ago+1 to SSLScan. Last time I checked though, the Windows builds don't work/support the XML output option. Automating this last year involved capturing STDOUT and regexing...
- toomuchtodo 12y agoThank you so much for this. Can I fork it to add the ability to accept an HTTP POST for the domain/hostname, and return the persistent results URL back to a webhook? (Slack integration)
- mdewinter 12y agoI do have a JSON (plain text, readable json) output endpoint planned, but that will be GET as well. Pull requests are welcome though.
- mdewinter 12y agoIt also does custom ports and protocols, for example 8443, 465 (SMTP), 994/995(POP/IMAP) etc.
- zaphoyd 12y agoCustom ports and IPv6 support <3
- simon_vetter 12y agoThanks for doing this, awesome job. May I request IPv6 support?
- zaphoyd 12y agoAs far as I can tell the website is accessible via IPv6 and you can run checks on IPv6 only servers. What is missing?
- simon_vetter 12y agoIf your hostname is dual stacked it only checks for ipv4 afaik.