# sslscan mit Homebrew, apk, apt, dnf, MacPorts, Nix, pacman, zypper, scoop installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für sslscan in AI-Agent-Workflows.

## Installation

```sh
sudo av install brew:sslscan
```

Weitere Installationsbefehle:

### macOS

- Homebrew (100%):

```sh
brew install sslscan
```

  Evidenz: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install sslscan
```

  Evidenz: MacPorts ports tree: net/sslscan/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- apk (92%):

```sh
sudo apk add sslscan
```

  Evidenz: Alpine Linux edge package indexes: sslscan from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

- Debian apt (92%):

```sh
sudo apt install sslscan
```

  Evidenz: Debian stable package indexes: sslscan from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- dnf (92%):

```sh
sudo dnf install sslscan
```

  Evidenz: Fedora Rawhide package metadata: sslscan from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#sslscan
```

  Evidenz: nixpkgs package indexes: sslscan from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix

- pacman (92%):

```sh
sudo pacman -S sslscan
```

  Evidenz: Arch Linux sync databases: sslscan from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

- zypper (92%):

```sh
sudo zypper install sslscan
```

  Evidenz: openSUSE Tumbleweed package metadata: sslscan from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst

### Windows

- Scoop (92%):

```sh
scoop install main/sslscan
```

  Evidenz: Scoop official bucket manifest trees: bucket/sslscan.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

## Paketfakten

- **Paketschlüssel:** brew:sslscan
- **Paketmanager:** Homebrew
- **Version:** 2.2.2
- **Quellzusammenfassung:** Test SSL/TLS enabled services to discover supported cipher suites
- **Homepage:** <https://github.com/rbsec/sslscan>
- **Repository:** <https://github.com/rbsec/sslscan>
- **Zuletzt aktualisiert:** 2026-05-12T11:16:46-04:00
- **Generiert:** 2026-08-03T19:37:03+00:00

## Executables

- sslscan (Alias)

## Installationsverhalten

- Bottle: nicht verfügbar

## Version und Aktualität

- Seite generiert: 2026-08-03
- Manager-Version: 2.2.2
## Projektgeschichte und Nutzung

sslscan is a command-line SSL/TLS scanner used to enumerate protocol support, cipher suites, certificates, key exchange groups, and related server properties. It is a package-manager staple because it gives admins and security testers a fast local check without relying on a hosted assessment service.

### Projektgeschichte

The current rbsec README identifies the project as a fork of ioerror's sslscan, which itself was a fork of Ian Ventura-Whiting's original sslscan.c and was influenced by OpenSSL s_client setup code. The rbsec fork added extensive highlighting and checks for weak protocol and cipher behavior, certificate issues, IPv6, STARTTLS modes, Heartbleed, RDP, PostgreSQL, MySQL, and other protocol contexts.

Version 2 was a major rewrite of the backend scanning code. The README says this made sslscan less dependent on the OpenSSL version for many checks, allowing support for legacy protocols such as SSLv2 and SSLv3 and newer TLS 1.3 behavior regardless of the OpenSSL version used for compilation.

### Adoptionsgeschichte

The supplied package metadata shows sslscan across apk, Homebrew, Debian, Fedora, MacPorts, Nix, Arch, Scoop, Ubuntu, and openSUSE. That breadth reflects its role as a common local TLS triage tool in Unix and cross-platform security toolboxes.

The changelog records a long stream of packaging-relevant changes: static OpenSSL builds, OS X and Windows support, OpenBSD fixes, Docker builds, XML output changes, and build-system work. Those details matter to distributors because TLS scanner behavior can change when the linked OpenSSL version changes.

### Wie es verwendet wird

Typical usage is to point sslscan at a host or target list and inspect supported protocols, cipher suites, certificate metadata, weak keys, compression, STARTTLS support, XML output, and optional checks. Users often install it through a package manager when they need quick TLS visibility from the machine they are on.

Version 2's static-build guidance is important operationally: upstream recommends ignoring the system OpenSSL and statically building against a chosen OpenSSL for additional checks and predictable behavior.

### Warum Paket-Nerds sich dafür interessieren

sslscan is interesting to package nerds because the package is not just a wrapper around OpenSSL; the exact build strategy influences what the scanner can see. Static versus system OpenSSL linking, minimum OpenSSL versions, and legacy protocol support are part of the package's user-visible behavior.

It is also a canonical example of security tooling that survived through forks: original utility, ioerror fork, rbsec-maintained fork, and then a version 2 rewrite to keep up with TLS 1.3 and post-quantum group reporting.

### Zeitleiste

- 2013: rbsec changelog records version 1.9 with highlighting for SSLv2, weak ciphers, RC4, anonymous ciphers, TLS 1.1 and 1.2 support, IPv6, and TLS compression checks.
- 2014: Version 1.9.2 added the OpenSSL Heartbleed check.
- 2015: Version 1.11.0 rewrote the ciphersuite scanning engine to be faster and ordered results by server preference.
- 2020: Version 2.0.0-alpha1 introduced a major backend rewrite, TLS 1.3 support, legacy protocol detection independent of OpenSSL, and key exchange and signature-algorithm checks.
- 2023: Version 2.1.0 moved builds to OpenSSL 3.0.
- 2025: Version 2.2.0 made OpenSSL 3.5 the minimum build target and added post-quantum group support.
- 2026: Version 2.2.2 fixed build behavior respecting the -j option when building OpenSSL.

### Related projects

- Related tools and references include OpenSSL s_client, the earlier ioerror sslscan fork, Ian Ventura-Whiting's original sslscan.c, and TLS assessment tools such as ssllabs-scan.
- The README also highlights Docker builds and Windows cross-compiled releases as related distribution surfaces.

### Quellen

- <https://github.com/rbsec/sslscan#readme>
- <https://github.com/rbsec/sslscan/blob/master/Changelog>
- input source_facts.package-manager


## Sicherheitshinweise

narrow executable package without higher-risk signals.

- **Geiger-Risiko:** grün / niedrig
- narrow executable package without higher-risk signals

## Andere Paketmanager-Einträge

- Debian apt - sslscan - 2.1.5-1: normalized package name match | Debian stable package indexes: sslscan from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Tests SSL/TLS enabled services to discover supported cipher suites | https://github.com/rbsec/sslscan
- Nix - sslscan: normalized package name match | nixpkgs package indexes: sslscan from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix
- Ubuntu apt - sslscan - 2.1.2-0.1build2: normalized package name match | Ubuntu 24.04 LTS package indexes: sslscan from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Tests SSL/TLS enabled services to discover supported cipher suites | https://github.com/rbsec/sslscan
- apk - sslscan - 2.2.2-r0: normalized package name match | Alpine Linux edge package indexes: sslscan from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | fast SSL/TLS configuration scanner | https://github.com/rbsec/sslscan
- apk - sslscan-doc - 2.2.2-r0: normalized package name match | Alpine Linux edge package indexes: sslscan-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | fast SSL/TLS configuration scanner (documentation) | https://github.com/rbsec/sslscan
- dnf - sslscan - 2.2.2-3.fc45: normalized package name match | Fedora Rawhide package metadata: sslscan from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Security assessment tool for SSL/TLS | https://github.com/rbsec/sslscan/
- pacman - sslscan - 2.2.2-1: normalized package name match | Arch Linux sync databases: sslscan from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | Fast tool to scan SSL services such as HTTPS to determine supported ciphers | https://github.com/rbsec/sslscan
- zypper - sslscan - 2.2.2-1.3: normalized package name match | openSUSE Tumbleweed package metadata: sslscan from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | SSL cipher scanning tool | https://github.com/rbsec/sslscan
- MacPorts - sslscan: normalized package name match | MacPorts ports tree: net/sslscan/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
- Scoop - main/sslscan: normalized package name match | Scoop official bucket manifest trees: bucket/sslscan.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1


## Combined YAML source

View the package source record on GitHub. [combined/sslscan.yml](https://github.com/mxcl/pkgdb/blob/main/combined/sslscan.yml)


## Quellen

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph