SSL Checker icon

SSL Checker

Check a certificate

Actions3

Full Scan Certificate

AI-generated

Overview

This node performs SSL certificate checks on a specified domain. It supports three operations:

  • Quick Check Certificate: Performs a fast check of the SSL certificate using an external quick-check API.
  • Full Scan Certificate: Conducts a comprehensive scan of the SSL certificate and related security details using the SSL Labs API, waiting until the scan is complete.
  • Retrieve Endpoint Analyze: Retrieves detailed analysis data for a specific endpoint of the target domain from SSL Labs.

This node is useful for monitoring SSL certificates, verifying their validity, and assessing the security posture of web servers. For example, it can be used by security teams to automate periodic SSL health checks or by developers to validate SSL configurations before deployment.

Properties

Name Meaning
Target Domain The domain name to check the SSL certificate for (e.g., "google.com").
Options Collection of additional options:
  Put Result in Field The name of the output field where the result will be stored (default is "ssl").

Output

The node outputs JSON data containing the results of the SSL check under the specified result field (default "ssl"). The structure depends on the operation:

  • Quick Check Certificate: JSON response from the quick SSL checker API with certificate details.
  • Full Scan Certificate: JSON response from SSL Labs API representing the full scan report, including status, endpoints, and security grades. The node waits and polls until the scan status is either "READY" or "ERROR".
  • Retrieve Endpoint Analyze: JSON response with detailed endpoint analysis data from SSL Labs, stored under a nested field named like <result_field>.analyze (default ssl.analyze).

No binary data output is produced by this node.

Dependencies

  • Requires an active internet connection to access external APIs:
    • A quick SSL checking service at https://ssl-checker.io/api/v1/check/
    • SSL Labs API at https://api.ssllabs.com/api/v4/
  • Requires configuration of an API key credential for SSL Labs API, which includes user email and organization information.
  • The node uses HTTP requests with JSON payloads and expects JSON responses.
  • The node internally handles polling for the full scan operation until completion.

Troubleshooting

  • Timeouts or slow responses: The full scan operation may take several minutes as it polls the SSL Labs API until the scan completes. Ensure network connectivity and allow sufficient time.
  • API authentication errors: Verify that the SSL Labs API credentials are correctly configured with valid email and other required fields.
  • Invalid domain errors: Ensure the target domain is correctly formatted and publicly accessible.
  • Unexpected API errors: Check the error messages returned by the APIs for rate limiting or service availability issues.
  • Result field conflicts: If the chosen output field name conflicts with existing data, rename it via the "Put Result in Field" option.

Links and References

Discussion