Is there an equivalent to SSLLabs' SSL test for SSL/TLS that is not HTTPS? [closed]
Try testssl.sh. This is a bash script rather than a web service, but it is under active development and can test STARTSSL services.
You could have a look at
- Nessus, which is (according to Wikipedia) "a proprietary comprehensive vulnerability scanner which is developed by Tenable Network Security. It is free of charge for personal use in a non-enterprise environment",
- sslscan, which tests SSL/TLS enabled services to discover supported cipher suites,
-
ssl_tests, which is a bash script that uses
sslscan
andopenssl
to check for various flaws - ssl version 2, weak ciphers, md5withRSAEncryption,SSLv3 Force Ciphering Bug/Renegotiation (although the website seems down). Here you'll find a cached version of the website provided by the Internet Archive.