Visual Studio Team Services build/release task for running a SSL Labs Assessment on a give hostname powered by Qualys SSL Labs.
Using SSL Labs Test Task
Follow the instructions give below to add and configure the SSL Labs task in your build/release pipeline.
Add the SSL Labs Task
Install the SSL Labs Task in to your Visual Studio Team Services account and search for the task in the available tasks. The task will also appear in the Test section of the task list. Add it to your build/release pipeline.
Required Configuration
SSL Labs Test task has one required configuration option that must be provided.
Required Options
Hostname to Analyse : The hostname of the web server to analyse.
Available Options
Execute Fresh Scan : Set this to make sure a fresh analysis is executed. If not a cached version of the analysis will be taken. Defaults to false
Publish Analysis Results : Set this if you want to publish the SSL Labs publicly on their web site. Defaults to false
Verification
This configuration section allows you to configure following certificate verification options.
Available Options
Enable Verifications : Set this if you want to enable verifications for the SSL Certificate. Supports checking for Certificate Grade for now. Defaults to false.
Minimum Certificate Grade : Set this if you want to define a minimum grade for the certificate. The available options are A+, A, A-, B, C, D, E, F If empty the value defaults to A
Expiration Alerts
This configuration section allows you to configure following Expiration alert options.
Available Options
Enable Certificate Expiration Alerts : Set this if you want to enable certificate expiration alerts. This will give you two options. 1). Fail the build upon expiration 2). Set a variable and its content for later use.
Number of Days Certificate Expiration : Set this to configure the alert to fire when there are defined number of days before the certificate expired.
Alert Mode : Select the mode for the alerts. Either break the build if the expiration fails or set a custom build variable to use later. Available options are Break Build and Set Custom Variable. The default value is set to Break Build
Output Variable Name : The name of the custom output variable you need to set. Only available when Alert Mode is set to Break Build
Output Variable Content : The content you need to include in the output variable. Only available when Alert Mode is set to Break Build
