TLSAudit

A simple script to check whether your Nginx TLS configuration is secure.

Usage

Make sure tlsaudit.sh is executable:

chmod 744 tlsaudit.sh

and run:

./tlsaudit.sh <path/to/your/nginx.conf>

Architecture

See DESIGN.md for more details on architectural drivers, software architecture and implementation.

Tests

You need shunit2 unit test framework for Bash scripts if you want to run the tests. It is available as Debian package under Ubuntu 24.04 LTS and as a Homebrew package under MacOS.

To run the test, make sure tlsaudit_test.sh is executable and simply call it:

./tlsaudit_test.sh