Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

How do I ensure I have my SSL configuration setup securely?

share|improve this question
add comment

2 Answers

up vote 10 down vote accepted

SSL Labs rocks for verifying all the nuances of a proper SSL setup - just put your domain name in and hit submit:

https://www.ssllabs.com/

share|improve this answer
2  
+1, Rocks indeed. –  AviD Nov 12 '10 at 0:26
add comment

(shameless advertisement)

There are various Web-based services which can test your server (e.g. SSL Labs) but this works only if your server is generically accessible from the Internet. If you want to test a server for which this is not true, you need a tool that you can run from a desktop system. I wrote one (opensource, free). Remember, though, that such a tool can never guarantee that your server is "secure"; that's way too vague an assertion. SSL test tools (and this includes SSL Labs and its ilk) can "only" point out some things which look fishy; they cannot claim exhaustivity, and they cover only the SSL level.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.