rmasci / sslcheck

sslcheck allows you to check ssl keys with or without DNS resolution

sslcheck

---

Sslcheck allows you to check ssl keys with or without DNS resolution. The company I work for requires that all servers have different ssl keys. So if you've got two, four or more servers that sit behind a load balancer, it makes it hard to inspect the keys on each server individually as the load balancer is where the DNS name for that SSL key resides.

Sslcheck takes two parameters -i -p -d . The -i is optional, and if it's passed sslcheck will not perform any dns lookups, while the -d is manditory. The -p is for servers that might be running on a port other than 443.

Sslcheck is written in Go and should compile without the need of additional packages.

Example:

IPv4

  ] $ ./sslcheck -d www.google.com
  Client connected to: 74.125.137.99:443
  Cert Checks OK
  Server key information:
    CN:	 www.google.com
	  OU:	 []
	  Org:	 [Google Inc]
	  City:	 [Mountain View]
	  State:	 [California]
	  Country: [US]
  SSL Certificate Valid:
	  From:	 2011-10-26 00:00:00 +0000 UTC
	  To:	 2013-09-30 23:59:59 +0000 UTC
  Valid Certificate DNS:
	  www.google.com
  Issued by:
	  Thawte SGC CA
	  []
	  [Thawte Consulting (Pty) Ltd.]

Client connected to: [2607:f8b0:4002:801::1001]:443

IPv6

  ] $ ./sslcheck -d www.google.com
Client connected to: [2607:f8b0:4002:801::1001]:443
Cert Checks OK
Server key information:
	CN:	 *.google.com
	OU:	 
	Org:	 Google Inc
	City:	 Mountain View
	State:	 California
	Country: US
SSL Certificate Valid:
	From:	 2015-10-15 16:42:43 +0000 UTC
	To:	 2016-01-13 00:00:00 +0000 UTC
	OK: 	Cert Expires in 78 days
Valid Certificate DNS:
	*.google.com
	*.android.com
	...
	youtubeeducation.com
Issued by:
	Google Internet Authority G2
	Google Inc