vessl is a simple wrapper script that connects, extracts and then verifies the ssl certificate of an encrypted service. It was originally written in order to script up the ability to verify ssl certificates across a large network.

features

• vessl will connect to any service that openssl can
• it will extract and verify against a given CA Pem file
• it will check that certificate matches the host it is on
• it produce a map going from ip's to hostname
• checks to see if certificate is based on a blacklisted debian key

dependencies

• openssl
• ping
• openssl-vulnkey
• mktemp
• CA Pem File

download

download vessl