| 11 | 11 |
Architecture: all
|
| 12 | 12 |
Depends: ${misc:Depends}, sslscan, openssl
|
| 13 | 13 |
Description: Evaluates the security of a target SSL/TLS (HTTPS) server
|
| 14 | |
TLSSLed is a Linux shell script whose purpose is to evaluate
|
| 15 | |
the security of a target SSL/TLS (HTTPS) web server
|
| 16 | |
implementation. It is based on sslscan, a thorough SSL/TLS
|
| 17 | |
scanner that is based on the openssl library, and on the
|
| 18 | |
"openssl s_client" command line tool. The current tests
|
| 19 | |
include checking if the target supports the SSLv2 protocol,
|
| 20 | |
the NULL cipher, weak ciphers based on their key length (40
|
| 21 | |
or 56 bits), the availability of strong ciphers (like AES),
|
| 22 | |
if the digital certificate is MD5 signed, and the current
|
| 23 | |
SSL/TLS renegotiation capabilities.
|
|
14 |
TLSSLed is a Linux shell script whose purpose is to evaluate
|
|
15 |
the security of a target SSL/TLS (HTTPS) web server
|
|
16 |
implementation. It is based on sslscan, a thorough SSL/TLS
|
|
17 |
scanner that is based on the openssl library, and on the
|
|
18 |
"openssl s_client" command line tool. The current tests
|
|
19 |
include checking if the target supports the SSLv2 protocol,
|
|
20 |
the NULL cipher, weak ciphers based on their key length (40
|
|
21 |
or 56 bits), the availability of strong ciphers (like AES),
|
|
22 |
if the digital certificate is MD5 signed, and the current
|
|
23 |
SSL/TLS renegotiation capabilities.
|