up vote 1 down vote favorite
share [g+] share [fb]

I run several web servers and would like to establish which of my web servers support different types of SSL.

e.g TLS/SSL, SSL v2, SSLv3 etc.

Does anyone know of a tool (whether web based or installed) that I can point towards a web server and it will tell me which versions of SSL are implemented on the web server as browsers don't show this information due to the handshake being done before the browser displays the page.

The only way I can think to get this information is packet sniffing which I would like to avoid.

Thanks in advance,

C

link|improve this question
57% accept rate
feedback

1 Answer

up vote 1 down vote accepted

https://www.ssllabs.com/ssldb/index.html is a good tool, as it gives you not only the SSL versions supported in a significant degree of detail but also examines things like cipher strength and key exchange.

We used to use http://tlsreport.layer8.net/ but that appears to be offline.

You can also use the openssl s_client tool, with the following flags: -ssl2, -ssl3, -tls1, -no_ssl2, -no_ssl3, and -no_tls1.

link|improve this answer
Couldn't this be done with openssl somehow? – 3molo Nov 4 '10 at 12:33
Yeah, updated the answer, although that doesn't give you nearly the same degree of information as the SSL Labs Report. – Zanchey Nov 4 '10 at 13:42
excellent, ssllabs worked for what I was after. Thanks :) – ccame Nov 4 '10 at 13:54
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.