TLS
scanners
- ssllabs (web)
- cryptcheck (web)
- is your internet up to date (web)
- cipherscan (cli)
- testssl.sh (cli)
nmap --script ssl-enum-ciphers -p 443 example.com
openssl
Pour vérifier que le certificat, le CSR et la clé correspondent :
openssl rsa -noout -modulus -in key.pem | md5sum
openssl x509 -noout -modulus -in cert.pem | md5sum
openssl req -noout -modulus -in csr.pem | md5sum