Hacker News Reader

HNHacker News

Top New Best Ask Show Jobs

Comment by mdewinter | Hacker News Reader

Full thread

mdewinter·

My weekend project.

* Tries to give all the information you need instead of a rating.

* Open source, so you can self host it.

* Does the entire certificate chain.

* Allows to paste a CRL/Cert

* Validates the certificate, chain, CRL and OCSP (of every cert in the chain)

* Has easy copy-pastable PEM versions of certs

* Ciphersuite enumeration as an option.

* Fast.

View on HN

Thank you so much for this. Can I fork it to add the ability to accept an HTTP POST for the domain/hostname, and return the persistent results URL back to a webhook? (Slack integration)

I do have a JSON (plain text, readable json) output endpoint planned, but that will be GET as well. Pull requests are welcome though.

It also does custom ports and protocols, for example 8443, 465 (SMTP), 994/995(POP/IMAP) etc.

Custom ports and IPv6 support <3

This is pretty great (and you even managed to snag a short domain name)!

For those who are trying to use the command line (rather than a webapp), "sslscan" performs these checks from a simple CLI tool.

+1 to SSLScan. Last time I checked though, the Windows builds don't work/support the XML output option. Automating this last year involved capturing STDOUT and regexing...

Thanks for doing this, awesome job. May I request IPv6 support?

As far as I can tell the website is accessible via IPv6 and you can run checks on IPv6 only servers. What is missing?

If your hostname is dual stacked it only checks for ipv4 afaik.

Reply on news.ycombinator.com