Package: cipherchecks
cipherchecksvisually see issues with supported cipher suitesTheres a few known tools out there that will check the cipher suites accepted by a system. This is my attempt in making the output of the results more readable.For example, usingsslscan, to only have a list of supported ciphers, you will need to grep for 'Accepted'.$sslscangithub.com|grepAccepted
AcceptedTLSv1.3256bitsTLS_CHACHA20_POLY1305_SHA256Curve25519DHE253AcceptedTLSv1.3256bitsTLS_AES_256_GCM_SHA384Curve25519DHE253AcceptedTLSv1.2128bitsECDHE-RSA-AES128-GCM-SHA256Curve25519DHE253AcceptedTLSv1.2256bitsECDHE-ECDSA-CHACHA20-POLY1305Curve25519DHE253AcceptedTLSv1.2256bitsECDHE-RSA-CHACHA20-POLY1305Curve25519DHE253AcceptedTLSv1.2256bitsECDHE-ECDSA-AES256-GCM-SHA384Curve25519DHE253AcceptedTLSv1.2256bitsECDHE-RSA-AES256-GCM-SHA384Curve25519DHE253AcceptedTLSv1.2128bitsECDHE-ECDSA-AES128-SHA256Curve25519DHE253AcceptedTLSv1.2128bitsECDHE-RSA-AES128-SHA256Curve25519DHE253AcceptedTLSv1.2256bitsECDHE-ECDSA-AES256-SHA384Curve25519DHE253AcceptedTLSv1.2256bitsECDHE-RSA-AES256-SHA384Curve25519DHE253AcceptedTLSv1.2256bitsECDHE-ECDSA-AES256-SHACurve25519DHE253AcceptedTLSv1.2256bitsECDHE-RSA-AES256-SHACurve25519DHE253AcceptedTLSv1.2128bitsAES128-GCM-SHA256
AcceptedTLSv1.2256bitsAES256-GCM-SHA384
AcceptedTLSv1.2128bitsAES128-SHA256
AcceptedTLSv1.2256bitsAES256-SHA256
AcceptedTLSv1.2128bitsAES128-SHA
AcceptedTLSv1.2256bitsAES256-SHAtestssl.shdoes way more than just listing the accepted ciphers, however the output of that is skewed too.$testssl-Egithub.com

...snip...

HexcodeCipherSuiteName(OpenSSL)KeyExch.EncryptionBitsCipherSuiteName(IANA/RFC)-----------------------------------------------------------------------------------------------------------------------------
SSLv2
SSLv3
TLS1TLS1.1
TLS1.2xc030ECDHE-RSA-AES256-GCM-SHA384ECDH253AESGCM256TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384xc02cECDHE-ECDSA-AES256-GCM-SHA384ECDH253AESGCM256TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384xc028ECDHE-RSA-AES256-SHA384ECDH253AES256TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384xc024ECDHE-ECDSA-AES256-SHA384ECDH253AES256TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384xc014ECDHE-RSA-AES256-SHAECDH253AES256TLS_ECDHE_RSA_WITH_AES_256_CBC_SHAxc00aECDHE-ECDSA-AES256-SHAECDH253AES256TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHAxcca9ECDHE-ECDSA-CHACHA20-POLY1305ECDH253ChaCha20256TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256xcca8ECDHE-RSA-CHACHA20-POLY1305ECDH253ChaCha20256TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256x9dAES256-GCM-SHA384RSAAESGCM256TLS_RSA_WITH_AES_256_GCM_SHA384x3dAES256-SHA256RSAAES256TLS_RSA_WITH_AES_256_CBC_SHA256x35AES256-SHARSAAES256TLS_RSA_WITH_AES_256_CBC_SHAxc02fECDHE-RSA-AES128-GCM-SHA256ECDH253AESGCM128TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256xc02bECDHE-ECDSA-AES128-GCM-SHA256ECDH253AESGCM128TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256xc027ECDHE-RSA-AES128-SHA256ECDH253AES128TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256xc023ECDHE-ECDSA-AES128-SHA256ECDH253AES128TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256x9cAES128-GCM-SHA256RSAAESGCM128TLS_RSA_WITH_AES_128_GCM_SHA256x3cAES128-SHA256RSAAES128TLS_RSA_WITH_AES_128_CBC_SHA256x2fAES128-SHARSAAES128TLS_RSA_WITH_AES_128_CBC_SHA
TLS1.3x1302TLS_AES_256_GCM_SHA384ECDH253AESGCM256TLS_AES_256_GCM_SHA384x1303TLS_CHACHA20_POLY1305_SHA256ECDH253ChaCha20256TLS_CHACHA20_POLY1305_SHA256x1301TLS_AES_128_GCM_SHA256ECDH253AESGCM128TLS_AES_128_GCM_SHA256Done2021-07-1407:37:53[12s]-->>140.82.121.4:443(github.com)<<--Thistoolattempts to make the output of the accepted ciphers a little more copy & paste'able.installationIts highly recommended to usepipxas it isolates all the dependencies for you.python3-mpipinstallpipx
pipxensurepath
pipxinstallcipherchecksinstalling from sourceYou should only install from source if you intend on making changes to the codeYou're going to need to installpoetryas it is used to manage dependencies.gitclonehttps://github.com/sensepost/ciphercheckscdcipherchecks
poetryinstalllicensecipherchecksis licensed under aGNU General Public v3 License. Permissions beyond the scope of this license may be available athttp://sensepost.com/contact/.