This repository contains various tools, which are intended to debug or analyze problems related to SSL/TLS.
- analyze-ssl.pl
- check support for various SSL/TLS version
- check which ciphers are support
- verfiy certificate
- check OCSP state
- check if SNI is supported and/or required
- display chain certificates and also local root if certification succeeded
- support direct connection and various form of STARTTLS
- ...
- mx_starttls_bulk.pl
- bulk checking of domains for SMTP TLS support
- fast parallel checking with non-blocking I/O: 40..60 domains/s which includes MX lookups and several TLS connections
- checks for common problems with TLS support in MTA
- does not try to verify certificates, because STARTTLS itself is open to MITM attacks by stripping STARTTLS support
- mx_starttls_bulk_summarize.pl
- summarize data created by mx_starttls_bulk
- https_ocsp_bulk.pl
- check lots of sites for certificate verification, ciphers and OCSP revocation problems
- synchronous, i.e one site gets checked after the other
- check-ssl-heartbeat.pl
- check for heartbleed OpenSSL vulnerability
- supports various protocols requiring STARTTLS or similar