Take the 2-minute tour ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.

Are there any tools that can validate an OpenSSL cipher list both syntactically and semantically?

For example, ALL:!LOW:!SSLv2:!EXP:!aNULL is both syntactically and semantically valid cipher list. On the other hand, FOO:!BAR:!SSLv2:!EXP:!aNULL is semantically invalid since FOO and BAR are not valid cipher strings while it is syntactically valid. Is there any tool (whether in the OpenSSL package or from a 3rd party) that can validate a cipher list in both scenarios?

Of course it is possible to write a tool from scratch using the cipher list format and cipher strings that can be fetched from openssl ciphers command output, but I don't like reinventing the wheel if I don't have to.

share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.