News for hackers. Stuff that matters.

A comment on Show HN: SSL Decoder – An open-source alternative for the SSL Labs server test.

Re:Show HN: SSL Decoder – An open-source alternative for the... by mdewinter on Thursday March 26, 2015 @02:20PM (#9271961)
My weekend project.

* Tries to give all the information you need instead of a rating.

* Open source, so you can self host it.

* Does the entire certificate chain.

* Allows to paste a CRL/Cert

* Validates the certificate, chain, CRL and OCSP (of every cert in the chain)

* Has easy copy-pastable PEM versions of certs

* Ciphersuite enumeration as an option.

* Fast.

[ Parent | on HN ]
Re:Show HN: SSL Decoder – An open-source alternative for the... by toomuchtodo on Thursday March 26, 2015 @02:41PM (#9272127)
Thank you so much for this. Can I fork it to add the ability to accept an HTTP POST for the domain/hostname, and return the persistent results URL back to a webhook? (Slack integration)
[ Parent | on HN ]
Re:Show HN: SSL Decoder – An open-source alternative for the... by mdewinter on Thursday March 26, 2015 @02:52PM (#9272217)
I do have a JSON (plain text, readable json) output endpoint planned, but that will be GET as well. Pull requests are welcome though.
[ Parent | on HN ]
Re:Show HN: SSL Decoder – An open-source alternative for the... by mdewinter on Thursday March 26, 2015 @05:55PM (#9273410)
It also does custom ports and protocols, for example 8443, 465 (SMTP), 994/995(POP/IMAP) etc.
[ Parent | on HN ]
Re:Show HN: SSL Decoder – An open-source alternative for the... by zaphoyd on Thursday March 26, 2015 @10:02PM (#9274363)
Custom ports and IPv6 support <3
[ Parent | on HN ]
Re:Show HN: SSL Decoder – An open-source alternative for the... by david_shaw on Thursday March 26, 2015 @02:38PM (#9272094)
This is pretty great (and you even managed to snag a short domain name)!

For those who are trying to use the command line (rather than a webapp), "sslscan" performs these checks from a simple CLI tool.

[ Parent | on HN ]
Re:Show HN: SSL Decoder – An open-source alternative for the... by billyhoffman on Thursday March 26, 2015 @04:58PM (#9273073)
+1 to SSLScan. Last time I checked though, the Windows builds don't work/support the XML output option. Automating this last year involved capturing STDOUT and regexing...
[ Parent | on HN ]
Re:Show HN: SSL Decoder – An open-source alternative for the... by simon_vetter on Friday March 27, 2015 @05:19AM (#9275299)
Thanks for doing this, awesome job. May I request IPv6 support?
[ Parent | on HN ]
Re:Show HN: SSL Decoder – An open-source alternative for the... by zaphoyd on Friday March 27, 2015 @08:10AM (#9275767)
As far as I can tell the website is accessible via IPv6 and you can run checks on IPv6 only servers. What is missing?
[ Parent | on HN ]
Re:Show HN: SSL Decoder – An open-source alternative for the... by simon_vetter on Friday March 27, 2015 @09:21AM (#9276051)
If your hostname is dual stacked it only checks for ipv4 afaik.
[ Parent | on HN ]