How do I ensure I have my SSL configuration setup securely?


SSL Labs rocks for verifying all the nuances of a proper SSL setup - just put your domain name in and hit submit:



(shameless advertisement)

There are various Web-based services which can test your server (e.g. SSL Labs) but this works only if your server is generically accessible from the Internet. If you want to test a server for which this is not true, you need a tool that you can run from a desktop system. I wrote one (opensource, free). Remember, though, that such a tool can never guarantee that your server is "secure"; that's way too vague an assertion. SSL test tools (and this includes SSL Labs and its ilk) can "only" point out some things which look fishy; they cannot claim exhaustivity, and they cover only the SSL level.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.