Qualys SSL Labs also has a great online tool that allows you to quickly analyze ...

ajtaylor · on Sept 26, 2013

Thanks for the link. I've sent an email to our $work hosting provider with some ideas to upgrade our TLS support, among other things.

prutschman · on Sept 26, 2013

Are you aware of any similar tools for testing non-HTTP TLS services, such as IMAP or SMTP?

jlgaddis · on Sept 26, 2013

I've found that some of these will work with, e.g. Dovecot's IMAPS daemon, just by appending ":993" to the hostname.

Yesterday I found one that would only work on port 443, but it was a simple matter of creating two iptables rules: one to permit incoming IP packets to 443/TCP and the other to redirect them to 993/TCP.

ivanr · on Sept 26, 2013

Yes, try CheckTLS: http://www.checktls.com/

Although, ironically, their web site does not seem to use TLS properly, not enforcing encryption on login and using mixed content.

erichurkman · on Sept 26, 2013

Not to my knowledge; a full testing tool for IMAP, SMTP, TLS, DKIM, and DNSSEC would have been amazing a year or so ago when I was still maintaining mail servers!