I would like to test whether a server is using some bad cipher suites.
The problem is, many of the bad cipher suites have been removed from openssl 1.x(e.g. suites exposed to FREAK). Therefore,
openssl sclient -cipher to test the target server does not always work.
I read from OpenSSL Cookbook:
No single SSL/TLS library supports all cipher suites, and that makes comprehensive testing difficult. For SSL Labs, I resorted to using partial handshakes for this purpose, with a custom client that pretends to support arbitrary suites.
Is there a such tool(opensource preferrably) available?