/p5-ssl-tools

various standalone perl scripts

Primary LanguagePerl

Collection of SSL Tools

This repository contains various tools, which are intended to debug or analyze problems related to SSL/TLS.

Analyzing state of TLS

  • analyze-ssl.pl
    • check support for various SSL/TLS version
    • check which ciphers are support
    • verfiy certificate
    • check OCSP state
    • check if SNI is supported and/or required
    • display chain certificates and also local root if certification succeeded
    • support direct connection and various form of STARTTLS
    • ...

SMTP TLS support (STARTTLS)

  • mx_starttls_bulk.pl
    • bulk checking of domains for SMTP TLS support
    • fast parallel checking with non-blocking I/O: 40..60 domains/s which includes MX lookups and several TLS connections
    • checks for common problems with TLS support in MTA
    • does not try to verify certificates, because STARTTLS itself is open to MITM attacks by stripping STARTTLS support
  • mx_starttls_bulk_summarize.pl
    • summarize data created by mx_starttls_bulk

HTTPS: Certificate Verification, OCSP ...

  • https_ocsp_bulk.pl
    • check lots of sites for certificate verification, ciphers and OCSP revocation problems
    • synchronous, i.e one site gets checked after the other

Heartbleed

  • check-ssl-heartbeat.pl
    • check for heartbleed OpenSSL vulnerability
    • supports various protocols requiring STARTTLS or similar