Qualys SSL Server Test

Qualys SSL Server Test: Deep Analyze

Qualys SSL Server Test is a free online service that analyzes the configuration of any SSL web server on the public Internet. It performs a deep analysis of the supported protocol versions, cipher suites, key lengths and hash functions. The test also checks for certificates, chains, expiry dates and common SSL related misconfigurations.

What is Qualys SSL Server Test?

Qualys SSL Server Test is a free online service offered by Qualys, Inc. that analyzes the configuration of any SSL web server on the public Internet. It allows users to test SSL/TLS settings such as supported protocol versions, cipher suites, certificate and certificate chains, key lengths, hash functions and signature algorithms.

The service performs a deep analysis by attempting SSL/TLS handshakes with the server using supported protocol versions like SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2 and TLS 1.3 based on server capabilities. It checks what cipher suites are enabled and ensures secure ones like AES and ChaCha are preferred over outdated suites like DES, 3DES, RC4 etc.

In addition, Qualys SSL Server Test checks the validity of certificates installed on the server along with the certificate chain. It verifies expiry dates, issuers, key sizes, hash functions and more. Companies often install invalid, expired or inaccurate certificate chains which can cause errors.

The test also scans for common SSL related misconfigurations like support for old SSL/TLS versions, anonymous key exchange suites, weak signature algorithms and more. It generates an overall grade from A+ to F based on the detected configuration.

The free online test allows quick inspection of any public server's SSL/TLS settings. The detailed and customizable reports provide admins actionable insights to improve security and get the best setup following industry best practices.

Qualys SSL Server Test Features

Official Links