I have a web server supporting SSL 3 and TLS protocols, the following are the supported cipher suites:
How can I check if the server supports
NULL cipher ?
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community
openssl s_client -connect www.example.com:443 -cipher NULL
You might also want to have a look at this blog which details how to test for different ciphers.
To test for 64-bit ciphers or lower you can use:
openssl s_client -connect www.example.com:443 -cipher LOW
To test for 128-bit ciphers:
openssl s_client -connect www.example.com:443 -cipher MEDIUM
To test for anything more than 128-bit:
openssl s_client -connect www.example.com:443 -cipher HIGH
In addition to the solution suggested by @Lucas (with
openssl), you can try this tool, which will give you the list of all cipher suites supported by your server, along with some other information. The cipher suites which do not actually encrypt data are:
If your server is accessible from the Internet in general, then SSL Labs as a tool which will give you similar information (but don't panic if you see a big red warning about vulnerability to BEAST attack, it is not real anymore).