GitHub - OpenSecurityResearch/ciphertest: A better SSL cipher checker using gnutls

OpenSecurityResearch / ciphertest Public

Notifications You must be signed in to change notification settings
Fork 12
Star 27

A better SSL cipher checker using gnutls

Unknown, GPL-3.0 licenses found

Licenses found

27 stars 12 forks Branches Tags Activity

Star

Notifications

Branches Tags

Name		Name	Last commit message	Last commit date
Latest commit History 22 Commits
COPYING		COPYING
LICENSE		LICENSE
README		README
cipherTest.sh		cipherTest.sh

Repository files navigation

cipherTest.sh 
by Patrick Bogen
------------------------------------

cipherTest.sh is a "better" SSL cipher checker in that
it uses gnutls, which has support for many more 
configurations than openssl. It tests potentially ~3,200 
different configurations (but does some pre-optimization 
so that it minimizes "failed" checks.)

It relies on openssl and gnutls-cli 

sudo apt-get install gnutls-bin

Example output:

	$ cipherTest www.host.com 443
	Proto   Cipher            MAC        KeX        
	------------------------------------------------
	SSL2.0  DES-CBC3-MD5      MD5        RSA        
	SSL2.0  RC2-CBC-MD5       MD5        RSA        
	SSL2.0  RC4-MD5           MD5        RSA        
	SSL2.0  DES-CBC-MD5       MD5        RSA        
	SSL2.0  EXP-RC2-CBC-MD5   MD5        RSA        
	SSL2.0  EXP-RC4-MD5       MD5        RSA        
	SSL3.0  3DES-CBC          SHA1       RSA        
	SSL3.0  ARCFOUR-128       SHA1       RSA        
	SSL3.0  ARCFOUR-128       MD5        RSA        
	SSL3.0  ARCFOUR-40        MD5        RSA-EXPORT 
	TLS1.0  3DES-CBC          SHA1       RSA        
	TLS1.0  ARCFOUR-128       SHA1       RSA        
	TLS1.0  ARCFOUR-128       MD5        RSA        
	TLS1.0  ARCFOUR-40        MD5        RSA-EXPORT