Check supoported SLL ciphers via provided OpenSSL binary.

openssl_check_ciphers.sh

#!/bin/bash
  
# Usage ./openssl_check_ciphers.sh host [/path/to/openssl/binary]
  
set -o errtrace
set -o nounset
set -o pipefail

if ! [ $1 ];
then
        echo syntax: $0 host [-v]
        exit
fi

SERVER=$1:443
OPENSSL_LOCATION=${2:-openssl}
DELAY=0
ciphers=`openssl ciphers 'ALL:eNULL' | sed -e 's/:/ /g'`

echo Obtaining cipher list from `$OPENSSL_LOCATION version`.

for cipherLine in `${OPENSSL_LOCATION} ciphers -v | awk '{print $1,":: "$5}' | sed -e "s/ :: Enc=[^(]*(/,/" -e "s/)$//"`;
do
        cipher=`echo $cipherLine | sed "s/,.*//"`
        bits=`echo $cipherLine | sed "s/[^,]*,//"`
        result=`echo -n | ${OPENSSL_LOCATION} s_client -cipher "$cipher" -connect $SERVER 2>&1`
        if [[ "$result" =~ "Cipher is $cipher" ]] ; then
                echo "$cipher ($bits bits)... YES"
        else
                if [[ "$result" =~ "Cipher is (NONE)" ]] ; then
                        error=`echo -n $result | cut -d':' -f6`
                        echo "$cipher ($bits bits)... NO ($error)"
                else
                        echo "$cipher ($bits bits)... UNKNOWN RESPONSE"
                fi
        fi
        sleep $DELAY
done