gistfile1.txt

$ bin/check_https mstdn.social 443 debug
2001:e42:107:1029::4:443 [mstdn.social]
Connection refused - connect(2) for [2001:e42:107:1029::4]:443
/home/tateisu/.rbenv/versions/2.3.0/lib/ruby/2.3.0/socket.rb:1207:in `__connect_nonblock'
/home/tateisu/.rbenv/versions/2.3.0/lib/ruby/2.3.0/socket.rb:1207:in `connect_nonblock'
/home/tateisu/cryptcheck/lib/cryptcheck/tls/server.rb:128:in `connect'
/home/tateisu/cryptcheck/lib/cryptcheck/tls/server.rb:185:in `ssl_client'
/home/tateisu/cryptcheck/lib/cryptcheck/tls/server.rb:199:in `block in extract_cert'
/home/tateisu/cryptcheck/lib/cryptcheck/tls/server.rb:196:in `each'
/home/tateisu/cryptcheck/lib/cryptcheck/tls/server.rb:196:in `extract_cert'
/home/tateisu/cryptcheck/lib/cryptcheck/tls/server.rb:36:in `initialize'
/home/tateisu/cryptcheck/lib/cryptcheck/tls/https/server.rb:10:in `initialize'
/home/tateisu/cryptcheck/lib/cryptcheck.rb:79:in `new'
/home/tateisu/cryptcheck/lib/cryptcheck.rb:79:in `block (2 levels) in analyze_addresses'
/home/tateisu/.rbenv/versions/2.3.0/lib/ruby/2.3.0/timeout.rb:91:in `block in timeout'
/home/tateisu/.rbenv/versions/2.3.0/lib/ruby/2.3.0/timeout.rb:33:in `block in catch'
/home/tateisu/.rbenv/versions/2.3.0/lib/ruby/2.3.0/timeout.rb:33:in `catch'
/home/tateisu/.rbenv/versions/2.3.0/lib/ruby/2.3.0/timeout.rb:33:in `catch'
/home/tateisu/.rbenv/versions/2.3.0/lib/ruby/2.3.0/timeout.rb:106:in `timeout'
/home/tateisu/cryptcheck/lib/cryptcheck.rb:77:in `block in analyze_addresses'
/home/tateisu/cryptcheck/lib/cryptcheck.rb:72:in `collect'
/home/tateisu/cryptcheck/lib/cryptcheck.rb:72:in `analyze_addresses'
/home/tateisu/cryptcheck/lib/cryptcheck.rb:110:in `analyze'
/home/tateisu/cryptcheck/lib/cryptcheck/tls/https.rb:5:in `analyze'
bin/check_https.rb:14:in `<main>'

59.106.235.21:443 [mstdn.social]

Key : RSA 2048 bits
Prefered cipher for TLSv1_2 : ECDHE-RSA-AES128-GCM-SHA256
Prefered cipher for TLSv1_1 : ECDHE-RSA-AES128-SHA
Prefered cipher for TLSv1 : ECDHE-RSA-AES128-SHA

TLSv1_2 / ECDHE-RSA-AES256-GCM-SHA384 : Supported (DH : ECC 256 bits)
TLSv1_2 / ECDHE-RSA-AES256-SHA384 : Supported (DH : ECC 256 bits)
TLSv1_2 / ECDHE-RSA-AES256-SHA : Supported (DH : ECC 256 bits)
TLSv1_2 / ECDHE-RSA-AES128-GCM-SHA256 : Supported (DH : ECC 256 bits)
TLSv1_2 / ECDHE-RSA-AES128-SHA256 : Supported (DH : ECC 256 bits)
TLSv1_2 / ECDHE-RSA-AES128-SHA : Supported (DH : ECC 256 bits)
TLSv1_2 / DES-CBC3-SHA : Supported

TLSv1_1 / ECDHE-RSA-AES256-SHA : Supported (DH : ECC 256 bits)
TLSv1_1 / ECDHE-RSA-AES128-SHA : Supported (DH : ECC 256 bits)
TLSv1_1 / DES-CBC3-SHA : Supported

TLSv1 / ECDHE-RSA-AES256-SHA : Supported (DH : ECC 256 bits)
TLSv1 / ECDHE-RSA-AES128-SHA : Supported (DH : ECC 256 bits)
TLSv1 / DES-CBC3-SHA : Supported

HSTS : 31536000

Grade : C

Protocole : 60 / 100
Key exchange : 50 / 100
Ciphers strength : 50 / 100
Overall score : 53.0 / 100

Best practices : hsts hsts_long