search

ssllabs / ssllabs-scan

A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing.
https://www.ssllabs.com/projects/ssllabs-apis/
Apache License 2.0
1.69k stars 239 forks source link

FTP or SMTP cannot be checked #721

Open PSLLSP opened 5 years ago

PSLLSP commented 5 years ago

https://www.ssllabs.com/ssltest/index.html is limited to HTTPS servers and TCP port 443; FTP or SMTP servers cannot be checked.

openssl supports testing of FTP or SMTP with parameter -starttls, like this:

openssl s_client -starttls ftp -connect ftp.example.com:21

Could be ssllab improved to allow check of TLS at other services too?

openssl supports these protocols with "-starttls": smtp, pop3, imap, ftp, xmpp, xmpp-server, telnet, irc gnutls supports these protocols with "-starttls": https, ftp, smtp, imap, ldap, xmpp, lmtp, pop3, nntp, sieve, postgres

ArchangeGabriel commented 5 years ago

You can use https://tls.imirhil.fr/ or https://www.htbridge.com/ssl/ for this.

Other than that, https://github.com/ssllabs/ssllabs-scan/issues/583#issuecomment-378137233.

tamthing commented 5 years ago

You can test SMTP, POP3, and IMAP on your servers with Qualys' CertView product.