Tls

Test sever supported ciphers

test via command line

• openssl (https://superuser.com/a/224263 https://www.redhat.com/sysadmin/6-openssl-commands https://node-security.com/posts/tls-server-signature-algorithm/)

apt-get install openssl
openssl ciphers -v | column -t | sort -r -k 2
openssl ciphers 'ALL:eNULL'
openssl s_client -ciphers <CHIPER> -connect example.com:443 2>&1

• nmap (from https://superuser.com/a/763908)

apt-get install nmap
curl -O http://nmap.org/svn/scripts/ssl-enum-ciphers.nse
$ nmap --script ssl-enum-ciphers -p 443 example.com

• sslscan (https://superuser.com/a/121572)

apt-get install sslscan
sslscan --tlsall example.com

test via web

from (https://www.thecodebuzz.com/how-to-list-the-ssl-tls-cipher-suites-a-particular-website-offers/)

• https://www.ssllabs.com/ssltest/
• https://www.immuniweb.com/ssl/
• https://observatory.mozilla.org/

more

see https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28recommended.29