TLS - Everything I know

Links
​duraconf - Collection of hardened configuration files for SSL/TLS services.
​Lemur - Manages TLS certificate creation.
​Step Certificates - Online certificate authority and related tools for secure automated certificate management, so you can use TLS everywhere.
​TLS 1.3 Is Coming: Here's What You Need To Know To Be Prepared For It (2019)​
​autocertdelegate - Get LetsEncrypt TLS certs for internal-only TLS servers via a delegated golang.org/x/crypto/acme/autocert server.
​SwiftTLS - TLS implementation in Swift.
​Illustrated TLS Connection - Every byte of a TLS connection explained and reproduced. (Code) (HN)
​SSLproxy - Transparent SSL/TLS proxy for decrypting and diverting network traffic to other programs, such as UTM services, for deep SSL inspection.
​libtls-bearssl - Implementation of libtls on top of BearSSL.
​TLS Encrypted Client Hello (2020)​
​IDontSpeakSSL - Simple tool based on sslyze to scan large scope and provide SSL/TLS vulnerabilities.
​crypto/tls in Go​
​OpenSSL - Robust, commercial-grade, and full-featured toolkit for the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols.
​BoringSSL - Fork of OpenSSL that is designed to meet Google's needs.
​Certigo - Utility to examine and validate certificates to help with debugging SSL/TLS issues.
​TLS for the Browsers of the Internet of Old Things (2020)​
​JARM - Active Transport Layer Security (TLS) server fingerprinting tool.
​secure-connections - Simple client and server for showing what's happening with certificates during TLS setup.
​iguanaTLS - Minimal, experimental TLS 1.2 implementation in Zig.
​Auditing for TLS certificates (Go code)​
​KEMTLS: Post-quantum TLS without signatures (2021)​
​Simple Go HTTPS/TLS Examples​
​third-wheel - TLS man-in-the-middle proxy written in rust, with the aim of being lightweight and fast.
​SSLsplit - Transparent SSL/TLS interception. (Web)
​Is TLS Fast Yet?​
​tlsfuzzer - SSL and TLS protocol test suite and fuzzer.
​TLS Mastery (HN)
​mkcert.org - Web service that allows you to build customised TLS trust stores. (Code)
​Feisty Duck - SSL/TLS and PKI training and books.
​Bulletproof TLS Newsletter​
​mint - Minimal TLS 1.3 Implementation in Go.
​Contruno - TLS termination proxy as a MirageOS.
​SSLyze - Fast and powerful SSL/TLS scanning library.
​NO STARTTLS - Why TLS is better without STARTTLS. Security Analysis of STARTTLS in the Email Context. (Lobsters)
​View your browser's TLS fingerprint (HN)
​BoringSSL Rust - Bindings for the Rust programming language and TLS adapters for tokio and hyper built on top of it.
​Tracing SSL/TLS connections using eBPF (2021) (HN)
​SmackTLS - State Machine Attacks.
​mod_md - Let's Encrypt (ACME) in Apache httpd.
​TLS Tools for Humans​
​SSL Kill Switch 2 - Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and macOS applications.
​Provision TLS certificates for your internal Tailscale services (2021)​
​Certifi - Provides Mozilla's carefully curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts.
​Staging TLS Certificates: Make every deployment a safe deployment (2021)​
​Handshake Encryption: Endgame (an ECH update) (2021)​
​Introducing SSL/TLS Recommender (2021) (Tweet)
​trustme - #1 quality TLS certs while you wait. (Docs)
​go-tunnel - TLS/SSL Tunnel - A modern STunnel replacement written in Go.
​Automating TLS certificate management in Docker (2021)​
​Mutual TLS (mTLS) - Documentation on how to configure a broad array of technologies to perform mutual TLS. (Code)
​s2n - Implementation of the TLS/SSL protocols. (Lobsters)
​TLS-Attacker - Java-based framework for analyzing TLS libraries.
​TLS Fingerprinting​
​acme-rs - ACME Client for Let's Encrypt written in Rust to request SSL/TLS certificates.
​TLS Poison - Tool that allows for generic SSRF via TLS, as well as CSRF via image tags in most browsers.
​TLA+ Foundation​
​Wait-For-Them - Wait until TCP services are running.
​TLStunnel - TLS reverse proxy unikernel.
​Post-Quantum TLS without handshake signatures (2020) (Code)
​Fighting TLS fingerprinting with Node.js (HN)
​Implementing TLS Encrypted Client Hello (2021) (HN)

SSH

Caddy

Last modified 1mo ago

Copy link