Visit badssl.com for a list of test subdomains, including:
self-signed.badssl.comwrong.host.badssl.comexpired.badssl.comincomplete-chain.badssl.comsha1.badssl.commixed.badssl.comrc4.badssl.comcbc.badssl.comhsts.badssl.compreloaded-hsts.badssl.com
Stock Ubuntu VM, DNS A records for badssl.com. and *.badssl.com. pointing to the VM.
Push the code into ~/badssl/ on the server:
make deploy
Set up nginx on the server:
sudo apt-get update
sudo apt-get install nginx
# Link repo into /var/www
sudo ln -s "${HOME}/badssl" /var/www/badssl
sudo ln -s /var/www/badssl/config/nginx.conf /etc/nginx/sites-available/badssl
sudo ln -s /etc/nginx/sites-available/badssl /etc/nginx/sites-enabled/badssl
# Make sure the actual keys are in /etc/keys/
sudo service nginx restart
- SSL Labs Test
tls-o-matic.comcertificate.revocationcheck.com- Safe Browsing:
- crbug.com/477868 uses:
- XHR ping URLS to test SHA-1 vs. SHA-256 support:
