How do I ensure I have my SSL configuration setup securely?
Asked
Active
Viewed 1,734 times
2 Answers
12
SSL Labs rocks for verifying all the nuances of a proper SSL setup - just put your domain name in and hit submit:
Tate Hansen
- 13,714
- 3
- 40
- 83
5
(shameless advertisement)
There are various Web-based services which can test your server (e.g. SSL Labs) but this works only if your server is generically accessible from the Internet. If you want to test a server for which this is not true, you need a tool that you can run from a desktop system. I wrote one (opensource, free). Remember, though, that such a tool can never guarantee that your server is "secure"; that's way too vague an assertion. SSL test tools (and this includes SSL Labs and its ilk) can "only" point out some things which look fishy; they cannot claim exhaustivity, and they cover only the SSL level.
Thomas Pornin
- 320,799
- 57
- 780
- 949