after recent POODLE vulnerability I am going around and checking all my servers are configured correctly.
Configuration is usually easy, almost all services have a way to set which protocols are enabled.
However, I can't find how to verify that the connection can't be downgraded to SSL and the actual list of supported protocols that the server will offer and will accept.
I tried with fiddler but just say it's https, I tried in chrome connecting and it say TLS, but browsers automatically select the best available option.
Is there a way to initiate a connection and test either which protocol are supported or if SSL protocol can be used?
