How to Get All Ciphers Supported From An Endpoint

CONTENT

STEPS TO FOLLOW

curl -o sc.sh https://raw.githubusercontent.com/mozilla/cipherscan/master/cipherscan

chmod +x sc.sh

./sc.sh 10.1.0.20:6443

[root@ip-10-1-0-20 ~]# ./sc.sh www.google.com:443
.............../sc.sh: line 1589: ./cscan.sh: No such file or directory

Target: www.google.com:443

prio  ciphersuite                    protocols              pubkey_size  signature_algoritm       trusted  ticket_hint  ocsp_staple  npn                   pfs                 curves  curves_orde
ring
1     ECDHE-ECDSA-AES128-GCM-SHA256  TLSv1.2                256          sha256WithRSAEncryption  True     100800       False        grpc-exp,h2,http/1.1  ECDH,P-256,256bits  server
2     ECDHE-ECDSA-AES256-GCM-SHA384  TLSv1.2                256          sha256WithRSAEncryption  True     100800       False        grpc-exp,h2,http/1.1  ECDH,P-256,256bits  server
3     ECDHE-ECDSA-AES128-SHA         TLSv1,TLSv1.1,TLSv1.2  256          sha256WithRSAEncryption  True     100800       False        grpc-exp,h2,http/1.1  ECDH,P-256,256bits  server
4     ECDHE-ECDSA-AES256-SHA         TLSv1,TLSv1.1,TLSv1.2  256          sha256WithRSAEncryption  True     100800       False        grpc-exp,h2,http/1.1  ECDH,P-256,256bits  server
5     ECDHE-RSA-AES128-GCM-SHA256    TLSv1.2                2048         sha256WithRSAEncryption  True     100800       False        grpc-exp,h2,http/1.1  ECDH,P-256,256bits  server
6     ECDHE-RSA-AES256-GCM-SHA384    TLSv1.2                2048         sha256WithRSAEncryption  True     100800       False        grpc-exp,h2,http/1.1  ECDH,P-256,256bits  server
7     ECDHE-RSA-AES128-SHA           TLSv1,TLSv1.1,TLSv1.2  2048         sha256WithRSAEncryption  True     100800       False        grpc-exp,h2,http/1.1  ECDH,P-256,256bits  server
8     ECDHE-RSA-AES256-SHA           TLSv1,TLSv1.1,TLSv1.2  2048         sha256WithRSAEncryption  True     100800       False        grpc-exp,h2,http/1.1  ECDH,P-256,256bits  server
9     AES128-GCM-SHA256              TLSv1.2                2048         sha256WithRSAEncryption  True     100800       False        grpc-exp,h2,http/1.1  None                None    server
10    AES256-GCM-SHA384              TLSv1.2                2048         sha256WithRSAEncryption  True     100800       False        grpc-exp,h2,http/1.1  None                None    server
11    AES128-SHA                     TLSv1,TLSv1.1,TLSv1.2  2048         sha256WithRSAEncryption  True     100800       False        grpc-exp,h2,http/1.1  None                None    server
12    AES256-SHA                     TLSv1,TLSv1.1,TLSv1.2  2048         sha256WithRSAEncryption  True     100800       False        grpc-exp,h2,http/1.1  None                None    server
13    DES-CBC3-SHA                   TLSv1,TLSv1.1,TLSv1.2  2048         sha256WithRSAEncryption  True     100800       False        grpc-exp,h2,http/1.1  None                None    server

OCSP stapling: not supported
Cipher ordering: server
Curves ordering: unknown - fallback: no
Server supports secure renegotiation
Server supported compression methods: NONE
TLS Tolerance: yes