Show details of TLS/SSL connections of remote hosts

sslscan is a nice tool to show details about TLS/SSL connections:

~> sslscan some-host-at.makandra.de

Testing SSL server some-host-at.makandra.de on port 443

  Supported Server Cipher(s):
    Failed    SSLv3  256 bits  ECDHE-RSA-AES256-GCM-SHA384
    Failed    SSLv3  256 bits  ECDHE-ECDSA-AES256-GCM-SHA384
    Failed    SSLv3  256 bits  ECDHE-RSA-AES256-SHA384
    Failed    SSLv3  256 bits  ECDHE-ECDSA-AES256-SHA384
    Rejected  SSLv3  256 bits  ECDHE-RSA-AES256-SHA
...

  Prefered Server Cipher(s):
    TLSv1  128 bits  ECDHE-RSA-AES128-SHA

  SSL Certificate:
    Version: 2
    Serial Number: -18446744073709551615
    Signature Algorithm: sha256WithRSAEncryption
    Issuer: /C=BE/O=GlobalSign nv-sa/CN=GlobalSign Domain Validation CA - SHA256 - G2
    Not valid before: Apr 22 09:27:05 2014 GMT
    Not valid after: Nov 18 11:53:18 2016 GMT
    Subject: /OU=Domain Control Validated/CN=*.makandra.de

You can scan different ports (e.g. for SMTP): ~> sslscan mail.makandra.com:25

Ubuntu? Try sudo apt-get install sslscan.

Thomas Eisenbarth

makandra.de

Say thanks

Last edit

2015-05-13

Thomas Eisenbarth

License

Source code in this card is licensed under the MIT License.

Posted by Thomas Eisenbarth to makandra dev (2015-05-13 11:57)