turbot/net_insights

Dashboard: SSL/TLS Server Configuration Report

This report provides a brief overview of the configuration of any SSL/TLS web server.

This report answers the following questions:

  • What protocols and cipher suites does the server support?
  • Does the server support any insecure cipher suites, e.g., RC4, CBC?
  • Does the server support TLS fallback SCSV for preventing protocol downgrade attacks?
This dashboard contains 3 cards, 1 input and 2 tables.

Usage

Install the mod:

mkdir dashboards
cd dashboards
powerpipe mod init
powerpipe mod install github.com/turbot/steampipe-mod-net-insights

Start the Powerpipe server:

steampipe service start
powerpipe server

Open http://localhost:9033 in your browser and select SSL/TLS Server Configuration Report dashboard.

You could also snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe dashboard run net_insights.dashboard.ssl_configuration_report --share

Queries

The dashboard uses the named queries:

Tags