I somehow was not able to find an answer. I can see the ciphersuits supported by the client/browser on the wire, but server does NOT appear to advertise the ciphersuites it supports during the handshake. But I know SSLLab's SSL tester does provide a report of the ciphersuites a SERVER would support. How was that done? One possibility is for the client to try ALL possibilities one at a time?

  • 1
    Yes they try one at a time, and so do many other tools that do this. See superuser.com/questions/109213/… for several scripts and links to at least a dozen more, and that doesn't count loads of commercial or otherwise restricted products. – dave_thompson_085 Apr 9 '16 at 23:59
  • Thanks. That's very helpful. I somehow didn't find it myself. – user12136 Apr 10 '16 at 0:25

I use this nmap script, it's convenient and gives scores similar to Qualys SSL Labs:


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.