Ways to test your server for SSL vulnerabilities

Overview

Self-testing for SSL vulnerabilities can be performed via several methods. Each of the methods below gives visibility into slightly different facets of the SSL configuration and posture of the server.

Information

For Internet-facing SSL Web servers on TCP Port 443

Qualys' SSL Tester
Note: Remember to check the Do not show the results on the boards box

  • Results in orange or red should be remediated

Mozilla's SSL Observatory

  • Results with a red X should be evaluated for remediation

For internal-only servers or servers on non-standard ports

Testssl.sh bash script
Note: This script may require a recent [less than 3 year old] *nix installation to work

  • Results in orange or red should be remediated
  • Results in yellow should be evaluated for relevance and security impact

For advanced testing

Please use the Information Security Consulting ticket form

Details

Article ID: 70780
Created
Thu 1/24/19 10:21 AM
Modified
Fri 11/4/22 11:57 AM