Test Suite:
TLS ServerDirection:
ServerTLS (Transport Layer Security) and its predecessor, SSL3 (Secure Sockets Layer), represents the current standard for communications privacy in the Internet. TLS is used in server and client applications ranging from web browsers to electronic banking software and e-commerce sites. As higher-level protocols often build upon it, the dependability of the underlying TLS implementation is an integral factor in the secure operation of a wide range of software products. The robustness and security of TLS/SSL software must be verified using the TLS Server Test Suite.
Used specifications
The TLS Protocol Version 1.0
Using TLS with IMAP, POP3 and ACAP
HTTP Upgrade to TLS
SMTP Service Extension for Secure SMTP over Transport Layer Security
Advanced Encryption Standard (AES) Ciphersuites for Transport Layer Security (TLS)
Transport Layer Security (TLS) Extensions
Pre-Shared Key Ciphersuites for Transport Layer Security (TLS)
The Transport Layer Security (TLS) Protocol Version 1.1
Transport Layer Security (TLS) Extensions
Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS)
Using the Secure Remote Password (SRP) Protocol for TLS Authentication
Transport Layer Security (TLS) Session Resumption without Server-Side State
Pre-Shared Key Cipher Suites for TLS with SHA-256/384 and AES Galois Counter Mode
Transport Layer Security (TLS) Renegotiation Indication Extension
Transport Layer Security (TLS) Extensions: Extension Definitions
The Secure Sockets Layer (SSL) Protocol Version 3.0
Transport Layer Security (TLS) Application-Layer Protocol Negotiation Extension
Transport Layer Security (TLS) Session Hash and Extended Master Secret Extension
A Transport Layer Security (TLS) ClientHello Padding Extension
TLS Next Protocol Negotiation
The SSL Protocol Version 3.0
Tool-specific information
Authentication Bypass
Certificate Validation
Heartbleed
Information Leakage
Insufficient Randomness
Unexpected Data
Weak Cryptography
Test tool general features
- Fully automated black-box negative testing
- Ready-made test cases
- Written in Java(tm)
- GUI command line remote interface modes
- Instrumentation (health-check) capability
- Support and maintenance
- Comprehensive user documentation
- Results reporting and analysis