TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Quick online tool to check SSL configurations

39 pointsby michiel3over 13 years ago

9 comments

pudover 13 years ago
Neat tool. If anyone wants to see what a broken SSL certificate looks like, here's one of my expired ones (I really gotta renew it one of these days...)<p><a href="https://www.ssllabs.com/ssldb/analyze.html?d=https://secure.tweetname.com" rel="nofollow">https://www.ssllabs.com/ssldb/analyze.html?d=https://secure....</a>
评论 #3599151 未加载
nodataover 13 years ago
Also <a href="https://www.wormly.com/test_ssl" rel="nofollow">https://www.wormly.com/test_ssl</a>
评论 #3598405 未加载
jerhewetover 13 years ago
Nice blogpost regarding BEAST on IIS servers:<p><a href="http://blogs.msdn.com/b/kaushal/archive/2011/10/03/taming-the-beast-browser-exploit-against-ssl-tls.aspx" rel="nofollow">http://blogs.msdn.com/b/kaushal/archive/2011/10/03/taming-th...</a>
darklajidover 13 years ago
While I liked the opportunity to tweak my configuration:<p>A tool that doesn't support SNI (at least it complains about getting the wrong certificate for one of my domains, something that doesn't happen in any browser I tested) is - restricted.
评论 #3598610 未加载
评论 #3598497 未加载
fduranover 13 years ago
This is great although I'm not sure I agree with showing a list of "Recent Worst-Rated" (graded "F", presumed with vulnerabilities), seems like painting a target on some servers.
preinheimerover 13 years ago
If you're running apache this line helped me improved my score drastically:<p>SSLCipherSuite ALL:!ADH:!EXPORT56:!EXPORT40:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:+EXP:+eNULL
评论 #3601759 未加载
GvSover 13 years ago
Thanks, nice tool! It told me that my server is vulnerable to some kind of BEAST attack. I searched a bit about that and fixed it.
alexchamberlainover 13 years ago
Well made tool that provides some good information backed by solid evidence.
ck2over 13 years ago
It refuses to check the quality of shared SSL certs.