{"id":3486,"date":"2013-03-13T09:09:34","date_gmt":"2013-03-13T09:09:34","guid":{"rendered":"https:\/\/www.darknet.org.uk\/?p=3486"},"modified":"2013-03-13T09:09:42","modified_gmt":"2013-03-13T09:09:42","slug":"sslyze-v0-6-available-for-download-ssl-server-configuration-scanning-tool","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2013\/03\/sslyze-v0-6-available-for-download-ssl-server-configuration-scanning-tool\/","title":{"rendered":"SSLyze v0.6 Available For Download &#8211; SSL Server Configuration Scanning Tool"},"content":{"rendered":"<p>SSLyze is a Python tool that can analyze the SSL configuration of a server by connecting to it. It is designed to be fast and comprehensive, and should help organizations and testers identify misconfigurations affecting their SSL servers.<\/p>\n<p><strong>Features<\/strong><\/p>\n<ul>\n<li>SSL 2.0\/3.0 and TLS 1.0\/1.1\/1.2 compatibility<\/li>\n<li>Performance testing: session resumption and TLS tickets support<\/li>\n<li>Security testing: weak cipher suites, insecure renegation, CRIME and THC-SSL DOS attacks<\/li>\n<li>Server certificate validation<\/li>\n<li>Support for StartTLS with SMTP and XMPP, and traffic tunneling through an HTTPS proxy<\/li>\n<li>Client certificate support for servers performing mutual authentication<\/li>\n<li>Scan results can be written to an XML file for further processing<\/li>\n<\/ul>\n<p>We wrote about SSLyze when it was first released: <a href=\"https:\/\/www.darknet.org.uk\/2011\/12\/sslyze-fast-and-full-featured-ssl-configuration-scanner\/\">sslyze \u2013 Fast and Full-Featured SSL Configuration Scanner<\/a><\/p>\n<p>And for the v0.4 release more recently: <a href=\"https:\/\/www.darknet.org.uk\/2012\/03\/sslyze-v0-4-released-scan-analyze-ssl-server-configuration\/\">SSLyze v0.4 Released \u2013 Scan &amp; Analyze SSL Server Configuration<\/a><\/p>\n<p>v0.6 is now available and has had some significant improvements, v0.5 saw the addition of a server side check for the <a href=\"http:\/\/arstechnica.com\/security\/2012\/09\/many-ways-to-break-ssl-with-crime-attacks-experts-warn\/\">CRIME attack<\/a>, that uses SSL Compression. New in v0.6:<\/p>\n<ul>\n<li>Added support for Server Name Indication; see &#8211;sni<\/li>\n<li>Partial results are returned when the server requires client authentication but no client certificate was provided<\/li>\n<li>Preliminary IPv6 support<\/li>\n<li>Various bug fixes and better support of client authentication and HTTPS tunneling<\/li>\n<\/ul>\n<p>Do also check out &#8211; <a href=\"https:\/\/www.darknet.org.uk\/2012\/12\/tlssled-v1-2-evaluate-the-security-of-a-arget-ssltls-https-web-server-implementation\/\">TLSSLed v1.2 \u2013 Evaluate The Security Of A Target SSL Or TLS (HTTPS) Web Server Implementation<\/a> &#8211; and be SURE to read the excellent comment from William.<\/p>\n<p>You can download SSLyze v0.6 here:<\/p>\n<p><strong>Linux\/OSX<\/strong> &#8211; <a href=\"https:\/\/dl.dropbox.com\/s\/h4cc7q68jdmxay3\/sslyze-0.6_src.zip?dl=1\">sslyze-0.6_src.zip<\/a><br \/>\n<strong>Windows 7\/Python 32-bit<\/strong> &#8211; <a href=\"https:\/\/dl.dropbox.com\/s\/lexhsfejbjp209e\/sslyze-0.6_Windows7_Python32.zip?dl=1\">sslyze-0.6_Windows7_Python32.zip<\/a><br \/>\n<strong>Windows 7\/Python 64-bit<\/strong> &#8211; <a href=\"https:\/\/dl.dropbox.com\/s\/l194sbqvnuuz2xs\/sslyze-0.6_Windows7_Python64.zip?dl=1\">sslyze-0.6_Windows7_Python64.zip<\/a><\/p>\n<p>Or read more <a href=\"https:\/\/github.com\/iSECPartners\/sslyze\">here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>SSLyze is a Python tool that can analyze the SSL configuration of a server by connecting to it. It is designed to be fast and comprehensive, and should help organizations and testers identify misconfigurations affecting their SSL servers. Features SSL 2.0\/3.0 and TLS 1.0\/1.1\/1.2 compatibility Performance testing: session resumption and TLS tickets support Security testing: [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[26,5,15],"tags":[190,4760,7191,4280,7194],"featured_image_src":null,"featured_image_src_square":null,"author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/3486"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=3486"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/3486\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=3486"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=3486"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=3486"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}