rmasci/sslcheck

sslcheck allows you to check ssl keys with or without DNS resolution

sslcheck

---

Sslcheck allows you to check ssl keys with or without DNS resolution. The company I work for requires that all servers have different ssl keys. So if you've got two, four or more servers that sit behind a load balancer, it makes it hard to inspect the keys on each server individually as the load balancer is where the DNS name for that SSL key resides.

Sslcheck takes two parameters -i -p -d . The -i is optional, and if it's passed sslcheck will not perform any dns lookups, while the -d is manditory. The -p is for servers that might be running on a port other than 443.

Sslcheck is written in Go and should compile without the need of additional packages.

Example:

IPv4

  ] $ ./sslcheck -d www.google.com
  Client connected to: 74.125.137.99:443
  Cert Checks OK
  Server key information:
    CN:	 www.google.com
	  OU:	 []
	  Org:	 [Google Inc]
	  City:	 [Mountain View]
	  State:	 [California]
	  Country: [US]
  SSL Certificate Valid:
	  From:	 2011-10-26 00:00:00 +0000 UTC
	  To:	 2013-09-30 23:59:59 +0000 UTC
  Valid Certificate DNS:
	  www.google.com
  Issued by:
	  Thawte SGC CA
	  []
	  [Thawte Consulting (Pty) Ltd.]

Client connected to: [2607:f8b0:4002:801::1001]:443

IPv6

  ] $ ./sslcheck -d www.google.com
Client connected to: [2607:f8b0:4002:801::1001]:443
Cert Checks OK
Server key information:
	CN:	 *.google.com
	OU:	 
	Org:	 Google Inc
	City:	 Mountain View
	State:	 California
	Country: US
SSL Certificate Valid:
	From:	 2015-10-15 16:42:43 +0000 UTC
	To:	 2016-01-13 00:00:00 +0000 UTC
	OK: 	Cert Expires in 78 days
Valid Certificate DNS:
	*.google.com
	*.android.com
	...
	youtubeeducation.com
Issued by:
	Google Internet Authority G2
	Google Inc

sslcheck's Issues

Use DialWithDialer instead of creating connection before it.

See
https://github.com/kkirsche/sslcheck/blob/master/cmd/root.go#L69-L71

Should be a bit more efficient if you just need a timeout function

Compile error - non-boolean condition in if statement

Thanks for your simple sslcheck!
I get an compile error, after an "git checkout" of your repo.

#go run .
./main.go:164:5: non-boolean condition in if statement
./main.go:170:5: non-boolean condition in if statement

I think the two bottom if statements, you meant "if verb.v" instead of "if verb" :-)