ssl cipher check

cipher_check.sh

###
# please test against the LB endpoint and a node
#syntax: ./cipher_check.sh <s3-endpoint>:443
#syntax: ./cipher_check.sh <node>:443
###


#!/usr/bin/env bash

# OpenSSL requires the port number.
SERVER=$1
DELAY=1
ciphers=$(openssl ciphers 'ALL:eNULL' | sed -e 's/:/ /g')

echo Obtaining cipher list from $(openssl version).

for cipher in ${ciphers[@]}
do
result=$(echo -n | openssl s_client -cipher "$cipher" -tls1_2 -connect $SERVER 2>&1)
if [[ "$result" =~ ":error:" ]] ; then
  echo -n
else
  if [[ "$result" =~ "Cipher is ${cipher}" || "$result" =~ "Cipher    :" ]] ; then
    echo "YES: "$cipher
  fi
fi
done

nmap_check.sh

nmap  --script ssl-enum-ciphers -p PORT URL