SSLScan tests SSL/TLS enabled services to discover supported cipher suites
Switch branches/tags
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.


SSLScan queries SSL services, such as HTTPS, in order to determine the ciphers that are supported. SSLScan is designed to be easy, lean and fast. The output includes preferred ciphers of the SSL service, the certificate and is in Text and XML formats.


  • Query SSL services
  • Supported cryptographic protocols: SSLv2, SSLv3, TLS 1.0, TLS 1.1 and TLS 1.2 (depends on used OpenSSL library)
  • STARTTLS support with FTP, IMAP, POP3, SMTP and XMPP
  • Perform a HTTP connect
  • IPv4 and IPv6
  • Bind to local IP address
  • Python extensions
  • Text and XML output



  • OpenSSL 1.0.0 or better
  • gcc
  • make
  • cmake
  • openssl-devel
  • python-devel (2.6, 2.7, 3.2 or 3.3 - Python 3.x preferred)

Makefile build:

mkdir build
cd build
cmake ..
make install        (as root)


To scan a HTTPS service:


To display more information:

sslscan --help



Published under the GPLv3 (see LICENSE for more information)

Most of the pre-TLS protocol setup was inspired by the OpenSSL s_client.c program.

Some of the OpenSSL setup code was borrowed from The Tor Project's Tor program. Thus it is likely proper to comply with the BSD license by saying: Copyright (c) 2007-2010, The Tor Project, Inc.

Projects using SSLScan