Test OpenSSL ciphers

By | January 3, 2015

#!/usr/bin/env bash

# OpenSSL requires the port number.
SERVER=192.168.1.11:443
DELAY=1
ciphers=$(openssl ciphers ‘ALL:eNULL’ | sed -e ‘s/:/ /g’)

echo Obtaining cipher list from $(openssl version).

for cipher in ${ciphers[@]}
do
echo -n Testing $cipher…
result=$(echo -n | openssl s_client -cipher “$cipher” -connect $SERVER 2>&1)
if [[ “$result” =~ “Cipher is ” ]] ; then
echo YES
else
if [[ “$result” =~ “:error:” ]] ; then
error=$(echo -n $result | cut -d’:’ -f6)
echo NO \($error\)
else
echo UNKNOWN RESPONSE
echo $result
fi
fi
sleep $DELAY
done