<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# Performing TLS Analysis — API & Tool Reference

> Quick reference for tools, commands, and APIs used in performing-tls-analysis.

## Tools


### `sslyze`

TLS/SSL configuration scanner

**Usage:**
```bash
sslyze --regular <target>:<port>
```

**Key Flags:**
  - `--json_out: JSON output`
  - `--certinfo: certificate details`
  - `--tlsv1_3: test TLS 1.3`

---

### `testssl.sh`

Comprehensive TLS testing tool

**Usage:**
```bash
testssl.sh <target>:<port>
```

**Key Flags:**
  - `--wide: wide output`
  - `--json: JSON output`
  - `--severity: filter by severity`

---

### `openssl`

OpenSSL CLI for certificate and protocol inspection

**Usage:**
```bash
openssl s_client -connect <target>:<port>
```

**Key Flags:**
  - `-showcerts: show cert chain`
  - `-tls1_2: force TLS 1.2`
  - `-servername: SNI hostname`

---


## Integration Notes

- All tools should be run with least-privilege access appropriate to the task
- Log all tool invocations for audit trail
- Validate tool output before acting on results
- Cross-reference findings with multiple tools where possible

## See Also

- Parent skill: [Network Security](../../../SKILL.md)
- Technique SKILL.md: [../SKILL.md](../SKILL.md)
