Friday, April 11, 2014

How to check cipher strength of a web site

  1. Install OpenSSL on your machine
  2. Open commend prompt and run the following command to check whether high encryption ciphers are being accepted:

    C:\OpenSSL-Win32\bin>echo|openssl s_client -connect name.domain.com:443 -cipher HIGH

    Note: Substitute HIGH with LOW to check if low encryption ciphers are being accepted. A properly configured site would not allow LOW encryption ciphers. You can also substitute the FQDN with an IP address.