$ ./cipherscan www.google.com:443 ................... prio ciphersuite protocols pfs_keysize 1 ECDHE-RSA-CHACHA20-POLY1305 TLSv1.2 ECDH,P-256,256bits 2 ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 ECDH,P-256,256bits 3 ECDHE-RSA-AES128-SHA TLSv1.1,TLSv1.2 ECDH,P-256,256bits 4 ECDHE-RSA-RC4-SHA SSLv3,TLSv1,TLSv1.1,TLSv1.2 ECDH,P-256,256bits 5 AES128-GCM-SHA256 TLSv1.2 6 AES128-SHA256 TLSv1.2 7 AES128-SHA TLSv1.1,TLSv1.2 8 RC4-SHA SSLv3,TLSv1,TLSv1.1,TLSv1.2 9 RC4-MD5 SSLv3,TLSv1,TLSv1.1,TLSv1.2 10 ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 ECDH,P-256,256bits 11 ECDHE-RSA-AES256-SHA384 TLSv1.2 ECDH,P-256,256bits 12 ECDHE-RSA-AES256-SHA SSLv3,TLSv1,TLSv1.1,TLSv1.2 ECDH,P-256,256bits 13 AES256-GCM-SHA384 TLSv1.2 14 AES256-SHA256 TLSv1.2 15 AES256-SHA SSLv3,TLSv1,TLSv1.1,TLSv1.2 16 ECDHE-RSA-DES-CBC3-SHA SSLv3,TLSv1,TLSv1.1,TLSv1.2 ECDH,P-256,256bits 17 DES-CBC3-SHA SSLv3,TLSv1,TLSv1.1,TLSv1.2 18 ECDHE-RSA-AES128-SHA256 TLSv1.2 ECDH,P-256,256bits Certificate: trusted, 2048 bit, sha1WithRSAEncryption signature
You can also get a JSON result:
$ /cipherscan -j -starttls xmpp jabber.ccc.de:5222 { "target": "jabber.ccc.de:5222", "date": "Sat, 19 Apr 2014 11:40:40 -0400", "ciphersuite": [ { "cipher": "DHE-RSA-AES256-SHA", "protocols": [ "SSLv3", "TLSv1" ], "pubkey": [ "2048" ], "sigalg": [ "sha1WithRSAEncryption" ], "trusted": "False", "pfs": "DH,1024bits" }, { "cipher": "AES256-SHA", "protocols": [ "SSLv3", "TLSv1" ], "pubkey": [ "2048" ], "sigalg": [ "sha1WithRSAEncryption" ], "trusted": "False", "pfs": "None" }, { "cipher": "EDH-RSA-DES-CBC3-SHA", "protocols": [ "SSLv3", "TLSv1" ], "pubkey": [ "2048" ], "sigalg": [ "sha1WithRSAEncryption" ], "trusted": "False", "pfs": "DH,1024bits" }, { "cipher": "DES-CBC3-SHA", "protocols": [ "SSLv3", "TLSv1" ], "pubkey": [ "2048" ], "sigalg": [ "sha1WithRSAEncryption" ], "trusted": "False", "pfs": "None" }, { "cipher": "DHE-RSA-AES128-SHA", "protocols": [ "SSLv3", "TLSv1" ], "pubkey": [ "2048" ], "sigalg": [ "sha1WithRSAEncryption" ], "trusted": "False", "pfs": "DH,1024bits" }, { "cipher": "AES128-SHA", "protocols": [ "SSLv3", "TLSv1" ], "pubkey": [ "2048" ], "sigalg": [ "sha1WithRSAEncryption" ], "trusted": "False", "pfs": "None" }, { "cipher": "RC4-SHA", "protocols": [ "SSLv3", "TLSv1" ], "pubkey": [ "2048" ], "sigalg": [ "sha1WithRSAEncryption" ], "trusted": "False", "pfs": "None" }, { "cipher": "RC4-MD5", "protocols": [ "SSLv3", "TLSv1" ], "pubkey": [ "2048" ], "sigalg": [ "sha1WithRSAEncryption" ], "trusted": "False", "pfs": "None" } ] }
