Skip to content

Latest commit

 

History

History
37 lines (33 loc) · 2.49 KB

ciphersuite.md

File metadata and controls

37 lines (33 loc) · 2.49 KB
Raw

How to test cipher suites for an endpoint

This is built from the mozila project https://github.com/mozilla/cipherscan

docker run jcabillot/cipherscan google.com

Result

...............
Target: google.com:443

prio  ciphersuite                  protocols              pubkey_size  signature_algoritm       trusted  ticket_hint  ocsp_staple  npn                   pfs                 curves      curves_ordering
1     ECDHE-RSA-AES128-GCM-SHA256  TLSv1.2                2048         sha256WithRSAEncryption  True     100800       False        grpc-exp,h2,http/1.1  ECDH,P-256,256bits  prime256v1  server
2     ECDHE-RSA-AES256-GCM-SHA384  TLSv1.2                2048         sha256WithRSAEncryption  True     100800       False        grpc-exp,h2,http/1.1  ECDH,P-256,256bits  prime256v1  server
3     ECDHE-RSA-AES128-SHA         TLSv1,TLSv1.1,TLSv1.2  2048         sha256WithRSAEncryption  True     100799       False        grpc-exp,h2,http/1.1  ECDH,P-256,256bits  prime256v1  server
4     ECDHE-RSA-AES256-SHA         TLSv1,TLSv1.1,TLSv1.2  2048         sha256WithRSAEncryption  True     100800       False        grpc-exp,h2,http/1.1  ECDH,P-256,256bits  prime256v1  server
5     AES128-GCM-SHA256            TLSv1.2                2048         sha256WithRSAEncryption  True     100800       False        grpc-exp,h2,http/1.1  None                None        server
6     AES256-GCM-SHA384            TLSv1.2                2048         sha256WithRSAEncryption  True     100800       False        grpc-exp,h2,http/1.1  None                None        server
7     AES128-SHA                   TLSv1,TLSv1.1,TLSv1.2  2048         sha256WithRSAEncryption  True     100800       False        grpc-exp,h2,http/1.1  None                None        server
8     AES256-SHA                   TLSv1,TLSv1.1,TLSv1.2  2048         sha256WithRSAEncryption  True     100800       False        grpc-exp,h2,http/1.1  None                None        server
9     DES-CBC3-SHA                 TLSv1,TLSv1.1,TLSv1.2  2048         sha256WithRSAEncryption  True     100800       False        grpc-exp,h2,http/1.1  None                None        server

OCSP stapling: not supported
Cipher ordering: server
Curves ordering: server - fallback: no
Server supports secure renegotiation
Server supported compression methods: NONE
TLS Tolerance: yes

Intolerance to:
 SSL 3.254           : absent
 TLS 1.0             : absent
 TLS 1.1             : absent
 TLS 1.2             : absent
 TLS 1.3             : absent
 TLS 1.4             : absent