{"id":20238456,"url":"https://github.com/smallstep/tls-probe","last_synced_at":"2026-05-08T21:32:54.460Z","repository":{"id":98614142,"uuid":"401897479","full_name":"smallstep/tls-probe","owner":"smallstep","description":null,"archived":false,"fork":false,"pushed_at":"2022-09-20T16:35:20.000Z","size":32,"stargazers_count":1,"open_issues_count":0,"forks_count":1,"subscribers_count":7,"default_branch":"main","last_synced_at":"2026-04-17T18:08:20.735Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/smallstep.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-09-01T01:49:06.000Z","updated_at":"2024-09-06T00:15:18.000Z","dependencies_parsed_at":"2023-07-04T21:03:36.819Z","dependency_job_id":null,"html_url":"https://github.com/smallstep/tls-probe","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/smallstep/tls-probe","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/smallstep%2Ftls-probe","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/smallstep%2Ftls-probe/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/smallstep%2Ftls-probe/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/smallstep%2Ftls-probe/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/smallstep","download_url":"https://codeload.github.com/smallstep/tls-probe/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/smallstep%2Ftls-probe/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":32798365,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-08T08:22:46.396Z","status":"ssl_error","status_checked_at":"2026-05-08T08:22:45.650Z","response_time":54,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-14T08:34:15.261Z","updated_at":"2026-05-08T21:32:54.444Z","avatar_url":"https://github.com/smallstep.png","language":"Shell","funding_links":[],"categories":[],"sub_categories":[],"readme":"# TLS spec suite\n\nThis is a test suite written with the goal of understanding undocumented TLS implementation details of various open source services.\n\n## Scope\n\nQuestions thses tests should test on common TLS-supporting services \u0026 clients:\n* Server certificate types supported:\n  * ECDSA chains?\n  * RSA chains?\n* Specific server cert format requirements * eg. special OIDs or subject DNs\n* Client TLS support:\n  * Are server certificates validated, or are invalid server certs silently accepted (encryption only)?\n  * Is OCSP supported?\n  * Does the client trust CAs in the system trust store?\n  * Can an invalid server cert be (insecurely) accepted?\n* Rotation process for servers:\n  * Test the reload command, if any\n  * If hot reloading an expired cert requires connecting to the server, can the client allow expired certs to connect?\n* Root distribution:\n  * Does the server trust CAs in the system trust store?\n* Is a server rekey supported? (in some servers it creates a race condition)\n\nTo set it up:\n\n- Install `npm`\n- Install `docker`\n- Install `step`\n- Run the following:\n\n  ```\n  npm install -g bats\n  npm install\n  bash ./makecerts.sh\n  bash ./docker_build.sh\n  ```\n\n- Start the fileserver:\n\n  ```\n  step fileserver --address 127.0.0.1:8443 \\\n                  --cert certs-ecdsa/server.crt \\\n\t              --key certs-ecdsa/server.key \\\n\t              --address 0.0.0.0:8443 fileserver\n  ```\n\n  In another window, run the tests:\n\n  ```\n  bats test\n  ```\n\n- Cleanup:\n\n  ```\n  docker rmi -f $(docker image ls -f tag=tlsprobe)\n  ```\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsmallstep%2Ftls-probe","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsmallstep%2Ftls-probe","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsmallstep%2Ftls-probe/lists"}