Build post-quantum TLS readiness inventory

Proprietary

The single discovery entry point for post-quantum TLS readiness. Answers the three questions that decide whether a connection can negotiate a hybrid ML-KEM key exchange: does the module run on a runtime that offers one (JDK 27, or BouncyCastle 1.81 and later), can it still negotiate TLS 1.3 at all, and does it pin its key-exchange groups to classical curves. Changes nothing; every finding lands in one of four data tables.

io.moderne.cryptography.pqc.BuildPqcReadinessInventory
mod run . --recipe=io.moderne.cryptography.pqc.BuildPqcReadinessInventory

Install it once from Recipe actions, then run it on every repository under the current directory. New to the Moderne CLI? Set it up.

Recipe list

It runs these recipes, in this order.

  1. Post-quantum TLS readiness report
  2. Find TLS protocol configuration
  3. Find TLS protocol configuration in properties and YAML
  4. Find TLS key exchange (named groups) configuration
  5. Find hardcoded SSL/TLS protocol choices