Let's interpret and manipulate the output results using the SSLyze by running it against a web application:
- Another tool that performs a thorough sweep and analyzes the SSL/TLS configurations of a target service is SSLyze. To perform the majority of the basic tests in SSLyze, arguments should include the target server and the --regular argument. This includes tests for SSLv2, SSLv3, TLSv1, renegotiation, resumption, certificate information, HTTP GET response status codes, and compression support, as follows:
- Alternatively, a single version of TLS or SSL can be tested to enumerate the supported ciphers associated with that ...