February 12, 2016

Checking a Web Server's TLS Configuration

Yesterday I reinstalled my virtual server and also created a new configuration for the Apache web server that fixed some issues of the old one. I also wanted to know how well the Apache is configured regarding the security of TLS.

Some days earlier, I stumbled upon SSL Labs, a site offering some automatic checks regarding certificate, server configuration and the used server software itself. Seems the server is quite fine.

Config

It is also quite interesting to use the tool to scan other sites. Let's say your online banks. I tested one with “A”, another one with “A-". Nice. Next try: the webpage of a big local energy supplier offering various services to its customers:

Config

© holger 2015 - 2020 |