Comment by yuhong | Hacker News Reader

Top New Best Ask Show Jobs

Comment by yuhong | Hacker News Reader

Parent Full thread

https://dev.ssllabs.com/

And what would be really really rad would be open-sourcing the toolkit that makes these checks possible -- I'd like to plug something like that into periodic checks in nagios or something.

If your servers are all public, you can use the (also free) SSL Labs API: https://www.ssllabs.com/projects/ssllabs-apis/

Sweet -- next best thing -- thanks! !

I already run this once a day using this tool https://github.com/ssllabs/ssllabs-scan

Not quite as feature rich or opinionated, but SSLyze is decent and not difficult to modify for your use case:

https://github.com/nabla-c0d3/sslyze

Thanks for the link! I'm not sure it does thing differently, though. I'll have to check it again later.

I think different tests are being run based on the version numbers: the dev test is v1.25.2, whereas the production version is v1.24.4

Reply on news.ycombinator.com