Are there any tools that can validate an OpenSSL cipher list both syntactically and semantically?
ALL:!LOW:!SSLv2:!EXP:!aNULL is both syntactically and semantically valid cipher list. On the other hand,
FOO:!BAR:!SSLv2:!EXP:!aNULL is semantically invalid since
BAR are not valid cipher strings while it is syntactically valid. Is there any tool (whether in the OpenSSL package or from a 3rd party) that can validate a cipher list in both scenarios?
Of course it is possible to write a tool from scratch using the cipher list format and cipher strings that can be fetched from
openssl ciphers command output, but I don't like reinventing the wheel if I don't have to.