SSL Server Test: Difference between revisions
Jump to navigation
Jump to search
No edit summary |
m (→SSL 憑證測試) |
||
| (3 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
== SSL 憑證測試 == | == SSL 憑證測試 == | ||
<onlyinclude> | <onlyinclude> | ||
定期檢查 SSL 憑證的線上服務 | |||
* {{Gd}} [https://letsmonitor.org/ Secure Certificate Monitoring - LetsMonitor.org] {{access | date=2023-02-17}} | |||
SSL 憑證測試線上掃描服務 | SSL 憑證測試線上掃描服務 | ||
* {{Gd}} [https://www.ssllabs.com/ssltest/ SSL Server Test (Powered by Qualys SSL Labs)]: Example report of [https://www.ssllabs.com/ssltest/analyze.html?d=certbot.eff.org&latest SSL Report: certbot.eff.org] {{access | date=2022-05-11}} | * {{Gd}} [https://www.ssllabs.com/ssltest/ SSL Server Test (Powered by Qualys SSL Labs)]: Example report of [https://www.ssllabs.com/ssltest/analyze.html?d=certbot.eff.org&latest SSL Report: certbot.eff.org] {{access | date=2022-05-11}} | ||
| Line 7: | Line 10: | ||
* [http://possible.lv/tools/hb/ Heartbleed OpenSSL extension testing tool, CVE-2014-0160] | * [http://possible.lv/tools/hb/ Heartbleed OpenSSL extension testing tool, CVE-2014-0160] | ||
* OpenSSL [https://wiki.openssl.org/index.php/Command_Line_Utilities Command Line Utilities] {{access | date=2017-02-21}} | * OpenSSL [https://wiki.openssl.org/index.php/Command_Line_Utilities Command Line Utilities] {{access | date=2017-02-21}} | ||
* [https://www.owasp.org/index.php/Testing_for_Weak_SSL/TLS_Ciphers,_Insufficient_Transport_Layer_Protection_(OTG-CRYPST-001) Testing for Weak SSL/TLS Ciphers, Insufficient Transport Layer Protection (OTG-CRYPST-001) - OWASP] {{access | date=2017-09-04}} | * [https://www.owasp.org/index.php/Testing_for_Weak_SSL/TLS_Ciphers,_Insufficient_Transport_Layer_Protection_(OTG-CRYPST-001) Testing for Weak SSL/TLS Ciphers, Insufficient Transport Layer Protection (OTG-CRYPST-001) - OWASP] {{access | date=2017-09-04}} | ||
* [https://inspect.rapydblok.com/ RapydBlok INSPECT - Audit SSL|TLS Security] 報告看起來跟 [https://github.com/drwetter/testssl.sh drwetter/testssl.sh: Testing TLS/SSL encryption anywhere on any port] 提供的一樣 {{access | date=2021-09-11}} | * [https://inspect.rapydblok.com/ RapydBlok INSPECT - Audit SSL|TLS Security] 報告看起來跟 [https://github.com/drwetter/testssl.sh drwetter/testssl.sh: Testing TLS/SSL encryption anywhere on any port] 提供的一樣 {{access | date=2021-09-11}} | ||
| Line 26: | Line 31: | ||
* [https://mozilla.github.io/server-side-tls/ssl-config-generator/ Generate Mozilla Security Recommended Web Server Configuration Files] {{access | date=2019-03-07}} | * [https://mozilla.github.io/server-side-tls/ssl-config-generator/ Generate Mozilla Security Recommended Web Server Configuration Files] {{access | date=2019-03-07}} | ||
* [https://cipherli.st/ Cipherli.st - Strong Ciphers for Apache, nginx and Lighttpd] | * [https://cipherli.st/ Cipherli.st - Strong Ciphers for Apache, nginx and Lighttpd] | ||
* [https://crashtest-security.com/configure-trusted-certificates/ How to Configure Trusted Certificates | Crashtest Security] {{access | date=2022-05-11}} | |||
---- | ---- | ||
Latest revision as of 16:30, 17 February 2023
SSL 憑證測試[edit]
定期檢查 SSL 憑證的線上服務
Secure Certificate Monitoring - LetsMonitor.org [Last visited: 2023-02-17]
SSL 憑證測試線上掃描服務
- SSL Server Test (Powered by Qualys SSL Labs): Example report of SSL Report: certbot.eff.org [Last visited: 2022-05-11]
- SSL Checker - SSL Certificate Verify: Example report of SSL Checker - SSL Certificate Verify [Last visited: 2017-08-29]
- OpenSSL Command Line Utilities [Last visited: 2017-02-21]
- Testing for Weak SSL/TLS Ciphers, Insufficient Transport Layer Protection (OTG-CRYPST-001) - OWASP [Last visited: 2017-09-04]
- RapydBlok INSPECT - Audit SSL|TLS Security 報告看起來跟 drwetter/testssl.sh: Testing TLS/SSL encryption anywhere on any port 提供的一樣 [Last visited: 2021-09-11]
SSL 憑證測試掃描工具
- drwetter/testssl.sh: Testing TLS/SSL encryption anywhere on any port License: GNU General Public License v2.0
顯示 SSL 憑證資訊[edit]
- 設定讓 Google Chrome 可直接顯示 SSL 憑證資訊教學 for Chrome
v. 30 [Last visited: 2017-08-06]
免費 SSL 憑證[edit]
Further reading[edit]
- Generate Mozilla Security Recommended Web Server Configuration Files [Last visited: 2019-03-07]
- Cipherli.st - Strong Ciphers for Apache, nginx and Lighttpd
- How to Configure Trusted Certificates | Crashtest Security [Last visited: 2022-05-11]
Web site design and development process
- Information gathering: Research surveys
- Planning: Before you start to build a website, Content development strategy | Register domain name, Choose web hosting | Information architecture | Data model: Data type, Data flow | Documentation: Request For Proposal | Licensing
- Design: CSS tools, Free fonts, Free photos, Emoji & icons
- Testing & delivery: Usability test, check browser compatibility | Web testing | Speed up websites: Web Ping, Software acceptance test plan | Promote your web
- Maintenance: Site backup & restore test, Software update (OS patch or CMS security update)
- Need help? Community, I need inspiration, Web design glossary