ssl-audit

SSL/HTTPS Audit – report similar to SSL Labs

A lightweight Python tool for scanning HTTPS/TLS configuration — similar in spirit to SSL Labs, but fast and self-hosted.
It checks supported TLS versions, certificate details, HTTP headers (HSTS), OCSP stapling, ALPN/HTTP2, and CAA records.

---

🚀 Features

• Detects supported TLS versions (1.0–1.3)
• Extracts certificate info (CN, SAN, issuer, validity, signature algorithm)
• Checks HSTS, HTTP/2, ALPN, and OCSP stapling
• Verifies weak/strong cipher support
• Assigns a simple A+–F grade based on security level

---

🧩 Usage

usage: ssl-audit.py [-h] [--port PORT] [--self-test] [host]

TLS/HTTPS audit (mini SSL Labs)

positional arguments:
  host         Domain or host to test

options:
  -h, --help   show this help message and exit
  --port PORT  Port number (default: 443)
  --self-test  Run internal self-tests without network

Local run

python ssl_audit.py example.com 

Docker

docker build -t ssl-audit .
docker run --rm ssl-audit example.com