I need to make a risk analysis for a given service in my Company. For this I would need to make a comparison between SSL Cipher Suites and how often they are used to reevaluate the need for old/weak ciphers. Is it possible in any way to monitor/output the Cipher Suites used by OpenSSL?
The goal is that I can say for example:
- TLS 1.2 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 was used in 1234 connections of 123456 connections
- SSLv3 SSL_RSA_WITH_RC4_128_SHA was used in 12 connections of 123456