[clug] Crypto debugging

[Robert Cohen]

sslscan https://github.com/rbsec/sslscan might be of use.

Its available in epel if thats helpful.

On 4/2/22 11:33 am, Tony Lewis via linux wrote:
> On 4/2/22 11:23 am, Bob Edwards via linux wrote:
>> On 3/2/22 7:48 pm, Chris Turton wrote:
>>> There's always nmap ( in most repos I would have thought) with the 
>>> relevant lua scripts to check certs and cipher suites for a given host.
>>>
>>> Ref: https://jumpnowtek.com/security/Using-nmap-to-check-certs-and-supported-algos.html 
>>>
>>
>> Hi Chris,
>>
>> Great tip! I didn't know about these nmap scripts.
>
> Seconded, thanks Chris.
>
> In fact a colleague pointed out the ssl-enum-ciphers script and we 
> used it, with some success.  But I wasn't aware of the others, and the 
> blog post is very useful.
>
> Tony
>
>