Read more

Show details of TLS/SSL connections of remote hosts

Thomas Eisenbarth
May 13, 2015Software engineer at makandra GmbH

sslscan is a nice tool to show details about TLS/SSL connections:

~> sslscan some-host-at.makandra.de

Testing SSL server some-host-at.makandra.de on port 443

  Supported Server Cipher(s):
    Failed    SSLv3  256 bits  ECDHE-RSA-AES256-GCM-SHA384
    Failed    SSLv3  256 bits  ECDHE-ECDSA-AES256-GCM-SHA384
    Failed    SSLv3  256 bits  ECDHE-RSA-AES256-SHA384
    Failed    SSLv3  256 bits  ECDHE-ECDSA-AES256-SHA384
    Rejected  SSLv3  256 bits  ECDHE-RSA-AES256-SHA
...

  Prefered Server Cipher(s):
    TLSv1  128 bits  ECDHE-RSA-AES128-SHA

  SSL Certificate:
    Version: 2
    Serial Number: -18446744073709551615
    Signature Algorithm: sha256WithRSAEncryption
    Issuer: /C=BE/O=GlobalSign nv-sa/CN=GlobalSign Domain Validation CA - SHA256 - G2
    Not valid before: Apr 22 09:27:05 2014 GMT
    Not valid after: Nov 18 11:53:18 2016 GMT
    Subject: /OU=Domain Control Validated/CN=*.makandra.de
Illustration UI/UX Design

UI/UX Design by makandra brand

We make sure that your target audience has the best possible experience with your digital product. You get:

  • Design tailored to your audience
  • Proven processes customized to your needs
  • An expert team of experienced designers
Read more Show archive.org snapshot

You can scan different ports (e.g. for SMTP): ~> sslscan mail.makandra.com:25

Ubuntu? Try sudo apt-get install sslscan.

Posted by Thomas Eisenbarth to makandra dev (2015-05-13 13:57)