SSLScan tests SSL/TLS enabled services to discover supported cipher suites
C Python
Latest commit 1328b49 Jun 27, 2014 @phibos phibos src - Some build fixes

README.md

SSLScan

SSLScan queries SSL services, such as HTTPS, in order to determine the ciphers that are supported. SSLScan is designed to be easy, lean and fast. The output includes preferred ciphers of the SSL service, the certificate and is in Text and XML formats.

Features

  • Query SSL services
  • Supported cryptographic protocols: SSLv2, SSLv3, TLS 1.0, TLS 1.1 and TLS 1.2 (depends on used OpenSSL library)
  • STARTTLS support with FTP, IMAP, POP3, SMTP and XMPP
  • Perform a HTTP connect
  • IPv4 and IPv6
  • Bind to local IP address
  • Python extensions
  • Text and XML output

Install

Requirements:

  • OpenSSL 1.0.0 or better
  • gcc
  • make
  • cmake
  • openssl-devel
  • python-devel (2.6, 2.7, 3.2 or 3.3 - Python 3.x preferred)

Makefile build:

mkdir build
cd build
cmake ..
make
make install        (as root)

Usage

To scan a HTTPS service:

sslscan example.org

To display more information:

sslscan --help

History

License

Published under the GPLv3 (see LICENSE for more information)

Most of the pre-TLS protocol setup was inspired by the OpenSSL s_client.c program.

Some of the OpenSSL setup code was borrowed from The Tor Project's Tor program. Thus it is likely proper to comply with the BSD license by saying: Copyright (c) 2007-2010, The Tor Project, Inc.

Projects using SSLScan