Take the 2-minute tour ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.

Are there any tools that can validate an OpenSSL cipher list both syntactically and semantically?

For example, ALL:!LOW:!SSLv2:!EXP:!aNULL is both syntactically and semantically valid cipher list. On the other hand, FOO:!BAR:!SSLv2:!EXP:!aNULL is semantically invalid since FOO and BAR are not valid cipher strings while it is syntactically valid. Is there any tool (whether in the OpenSSL package or from a 3rd party) that can validate a cipher list in both scenarios?

Of course it is possible to write a tool from scratch using the cipher list format and cipher strings that can be fetched from openssl ciphers command output, but I don't like reinventing the wheel if I don't have to.

share|improve this question
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.