Check ssl protocol, cipher & other properties in an asp.net mvc 4 application

后端 未结 3 558
囚心锁ツ
囚心锁ツ 2020-11-30 04:50

Because of compliance reasons we have to switch off the support of some ciphers and SSL2 on our webservers. This is not really a problem, but we would also like to inform th

3条回答
  •  借酒劲吻你
    2020-11-30 05:28

    Reading this with interest as we have exactly the same problem.

    It occurred to me that there must be a public web service available to query this type of information and I did a little research and found this: https://www.howsmyssl.com/s/api.html

    The API is here

    This API can be called from client side Javascript and it returns standard JSON which can be easily parsed and a suitable alert shown to your users.

    You can also send the information to your own web service for logging purposes and try to combine the information with your existing IIS logs.

    The only issue you face then is relying on a third party. This can be mitigated by standing up your own server and hosting the code which is freely available on GitHub.

    We are going to be working on this solution so once I have some code in place I will update this answer.

    Thanks again to Lars for the comprehensive answer above. I would have added this as a comment to that post however I thought it worth creating a separate answer so people can find it easier.

提交回复
热议问题