diff --git a/t/25_starttls.t b/t/25_starttls.t
new file mode 100755
index 0000000..7ca0f9c
--- /dev/null
+++ b/t/25_starttls.t
@@ -0,0 +1,146 @@
+#!/usr/bin/env perl
+
+# Just a functional test, whether there are any problems on the client side
+# Probably we could also inspect the JSON for any problems for 
+#    "id"           : "scanProblem"
+#    "finding"      : "Scan interrupted"
+
+use strict;
+use Test::More;
+use Data::Dumper;
+use JSON;
+
+my $tests = 0;
+my $check2run_smtp="--protocols --standard --pfs --server-preference --headers --vulnerable --each-cipher -q --ip=one --color 0";
+my $check2run="-q --ip=one --color 0";
+my $uri="";
+my $socketout="";
+my $opensslout="";
+
+# $check2run_smtp="--jsonfile tmp.json $check2run_smtp";
+# $check2run="--jsonfile tmp.json $check2run";
+
+$uri="smtp-relay.gmail.com:587";
+
+# we will have client simulations later, so we don't need to run everything again:
+unlink "tmp.json";
+printf "\n%s\n", "STARTTLS SMTP unit test via sockets --> $uri ...";
+$socketout = `./testssl.sh $check2run_smtp -t smtp $uri`;
+# my $socket = json('tmp.json');
+unlike($socketout, qr/(e|E)rror|(f|F)atal/, "");
+$tests++;
+
+unlink "tmp.json";
+printf "\n%s\n", "STARTTLS SMTP unit tests via OpenSSL --> $uri ...";
+$opensslout = `./testssl.sh --ssl-native $check2run_smtp -t smtp $uri`;
+# my $openssl = json('tmp.json');
+unlike($opensslout, qr/(e|E)rror|(f|F)atal|Oops|s_client connect problem/, "");
+$tests++;
+
+
+$uri="pop.gmx.net:110";
+
+unlink "tmp.json";
+printf "\n%s\n", "STARTTLS POP3 unit tests via OpenSSL --> $uri ...";
+$socketout = `./testssl.sh $check2run -t pop3 $uri`;
+# my $socket = json('tmp.json');
+unlike($socketout, qr/(e|E)rror|(f|F)atal/, "");
+$tests++;
+
+unlink "tmp.json";
+printf "\n%s\n", "STARTTLS POP3 unit tests via OpenSSL --> $uri ...";
+$opensslout = `./testssl.sh --ssl-native $check2run -t pop3 $uri`;
+# my $openssl = json('tmp.json');
+unlike($opensslout, qr/(e|E)rror|(f|F)atal|Oops|s_client connect problem/, "");
+$tests++;
+
+
+$uri="imap.gmx.net:143";
+
+unlink "tmp.json";
+printf "\n%s\n", "STARTTLS IMAP unit tests via sockets --> $uri ...";
+my $socketout = `./testssl.sh $check2run -t imap $uri`;
+# my $socket = json('tmp.json');
+unlike($socketout, qr/(e|E)rror|(f|F)atal/, "");
+$tests++;
+
+printf "\n%s\n", "STARTTLS IMAP unit tests via OpenSSL --> $uri ...";
+my $opensslout = `./testssl.sh --ssl-native $check2run -t imap $uri`;
+# my $openssl = json('tmp.json');
+unlike($opensslout, qr/(e|E)rror|(f|F)atal|Oops|s_client connect problem/, "");
+$tests++;
+
+
+$uri="jabber.org:5222";
+
+unlink "tmp.json";
+printf "\n%s\n", "STARTTLS XMPP unit tests via sockets --> $uri ...";
+my $socketout = `./testssl.sh $check2run -t xmpp $uri`;
+# my $socket = json('tmp.json');
+unlike($socketout, qr/(e|E)rror|(f|F)atal/, "");
+$tests++;
+
+printf "\n%s\n", "STARTTLS XMPP unit tests via OpenSSL --> $uri ...";
+my $opensslout = `./testssl.sh --ssl-native $check2run -t xmpp $uri`;
+# my $openssl = json('tmp.json');
+unlike($opensslout, qr/(e|E)rror|(f|F)atal|Oops|s_client connect problem/, "");
+$tests++;
+
+
+$uri="ldap.uni-rostock.de:21";
+
+unlink "tmp.json";
+printf "\n%s\n", "STARTTLS FTP unit tests via sockets --> $uri ...";
+my $socketout = `./testssl.sh $check2run -t ftp $uri`;
+# my $socket = json('tmp.json');
+unlike($socketout, qr/(e|E)rror|(f|F)atal/, "");
+$tests++;
+
+printf "\n%s\n", "STARTTLS FTP unit tests via OpenSSL --> $uri ...";
+my $opensslout = `./testssl.sh --ssl-native $check2run -t ftp $uri`;
+# my $openssl = json('tmp.json');
+unlike($opensslout, qr/(e|E)rror|(f|F)atal|Oops|s_client connect problem/, "");
+$tests++;
+
+
+# https://ldapwiki.com/wiki/Public%20LDAP%20Servers
+$uri="ldap.telesec.de:389";
+
+printf "\n%s\n", "STARTTLS LDAP unit tests via OpenSSL --> $uri ...";
+my $opensslout = `./testssl.sh --ssl-native $check2run -t ftp $uri`;
+# my $openssl = json('tmp.json');
+unlike($opensslout, qr/(e|E)rror|(f|F)atal|Oops|s_client connect problem/, "");
+$tests++;
+
+
+$uri="news.newsguy.com:119";
+
+unlink "tmp.json";
+printf "\n%s\n", "STARTTLS NNTP unit tests via sockets --> $uri ...";
+my $socketout = `./testssl.sh $check2run -t nntp $uri`;
+# my $socket = json('tmp.json');
+unlike($socketout, qr/(e|E)rror|(f|F)atal/, "");
+$tests++;
+
+printf "\n%s\n", "STARTTLS NNTP unit tests via OpenSSL --> $uri ...";
+my $opensslout = `./testssl.sh --ssl-native $check2run -t nntp $uri`;
+# my $openssl = json('tmp.json');
+unlike($opensslout, qr/(e|E)rror|(f|F)atal|Oops|s_client connect problem/, "");
+$tests++;
+
+
+# IRC: missing
+# LTMP, mysql, postgres
+
+
+
+done_testing($tests);
+unlink "tmp.json";
+
+sub json($) {
+	my $file = shift;
+	$file = `cat $file`;
+	unlink $file;
+	return from_json($file);
+}
+