How can I check for SSL vulnerabilities on my web

Question

Is there an easy way or online tool for checking a site's SSL vulnerability issues?

From the PCI standards I see that a site has to force SSLv3 or TLSv1 protocols and high security encryption algorithms. And I need to check if my site is compliant with those PCI DSS standards.

Answer 1

You can download Nessus which is free and scans for a number of known SSL vulnerabilities to see the list of SSL related scans go to this link on the left side click search then enter SSL into the search box, there are over 200 SSL security checks. (note: most will not apply to your situation necessarily)

Answer 2

These three sites are all currently (April 2011) offering free scans...

https://www.ssllabs.com/ssldb/index.html

http://www.serversniff.net/content.php?do=ssl

http://www.sslshopper.com/ssl-checker.html