[GTALUG] Script to show HTTP(S) and TLS details for a website

[William Park]

How does it compare with "testssl.sh" ?--William

Sent from Yahoo Mail on Android 
 
  On Sat, Aug 10, 2019 at 11:46 AM, Giles Orr via talk<talk at gtalug.org> wrote:   This may be seen as self-promotion - that's not totally wrong.  But I think this may also be useful to others and (as I acknowledge in the blog post) I'm quite pleased with the resultant script.

Over the past year and a half I've slowly developed a shell script that gives a concise summary of the state of TLS and HTTP(S) on a given website.  It looks like this:

    $ tlsdetails google.ca
    Using OpenSSL:  /usr/bin/openssl
    Expiry Date:    Oct 27 17:27:07 2019 GMT (78 days)
    Issuer:         Google Trust Services, CN
    TLS Versions:   tls1_3 tls1_2 tls1_1 tls1  (tried but unavailable: ssl3 ssl2 )
    HTTP Version:   2

I first started work on it after a couple embarrassing certificate expiries.  It then grew to check the Issuer, TLS versions, and more recently whether or not a site supports HTTP2.
(The pointer to the OpenSSL version is shown because the script will also run on Mac, and their version of 'openssl' is problematic at best.  That line is of course easy to remove if you don't like it.)
If you're interested, you can find the details here:

https://www.gilesorr.com/blog/tls-https-details.html
Any suggestions to improve the script would be most welcome.

-- 
Giles
https://www.gilesorr.com/
gilesorr at gmail.com---
Post to this mailing list talk at gtalug.org
Unsubscribe from this mailing list https://gtalug.org/mailman/listinfo/talk
  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://gtalug.org/pipermail/talk/attachments/20190811/14586f67/attachment.html>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: Untitled
URL: <http://gtalug.org/pipermail/talk/attachments/20190811/14586f67/attachment.ksh>