jvehent/cipherscan — pull request #15 by tomato42 (2014-04-19 21:21:07+00:00)
Title: Reporting improvements 03

Extend and fix reporting of Protocols, ciphers and PFS suites.

New report:
```
SSL/TLS survey of 78 websites from Alexa's top 1 million
Stats only from connections that did provide valid certificates
(or anonymous DH from servers that do also have valid certificate installed)

Supported Ciphers Count Percent
-------------------------+---------+-------
3DES 71 91.0256
AES 78 100.0
AES Only 1 1.2821
AES-CBC Only 1 1.2821
AES-GCM 35 44.8718
CAMELLIA 10 12.8205
CHACHA20 20 25.641
RC4 69 88.4615
RC4 Preferred 18 23.0769
RC4 forced in TLS1.1+ 6 7.6923
z:DES-CBC-SHA 11 14.1026
z:DHE-RSA-SEED-SHA 4 5.1282
z:EDH-RSA-DES-CBC-SHA 2 2.5641
z:EXP-DES-CBC-SHA 8 10.2564
z:EXP-RC2-CBC-MD5 8 10.2564
z:IDEA-CBC-SHA 8 10.2564
z:SEED-SHA 3 3.8462

Supported Handshakes Count Percent
-------------------------+---------+-------
DHE 24 30.7692
ECDHE 42 53.8462

Supported PFS Count Percent PFS Percent
-------------------------+---------+--------+-----------
DH,1024bits 24 30.7692 100.0
ECDH,P-256,256bits 40 51.2821 95.2381
ECDH,P-384,384bits 2 2.5641 4.7619
Prefer DH,1024bits 7 8.9744 29.1667
Prefer ECDH,P-256,256bits 33 42.3077 78.5714
Prefer PFS 40 51.2821 0
Support PFS 55 70.5128 0

Certificate sig alg Count Percent
-------------------------+---------+--------
sha1WithRSAEncryption 78 100.0

Certificate key size Count Percent
-------------------------+---------+--------
RSA 2048 78 100.0
RSA/ECDSA Dual Stack 0 0.0

Supported Protocols Count Percent
-------------------------+---------+-------
SSL3 77 98.7179
SSL3 or TLS1 Only 25 32.0513
TLS1 78 100.0
TLS1.1 51 65.3846
TLS1.2 49 62.8205
TLS1.2, 1.0 but not 1.1 2 2.5641
```