<html><head></head><body><div>Look at </div><div><a href="https://testssl.sh/">https://testssl.sh/</a></div><div><br></div><pre>That is an openssl wrapper which enumerates ciphers and protocols ( and a whole lot more)</pre><pre><br></pre><pre>Hexcode Cipher Suite Name (OpenSSL) KeyExch. Encryption Bits Cipher Suite Name (IANA/RFC)</pre><pre>-----------------------------------------------------------------------------------------------------------------------------</pre><pre>SSLv2 </pre><pre>SSLv3 </pre><pre>TLS 1 </pre><pre>TLS 1.1 </pre><pre>TLS 1.2 </pre><pre> xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 521 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 </pre><pre> xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 521 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 </pre><pre>TLS 1.3 </pre><pre> x1302 TLS_AES_256_GCM_SHA384 ECDH 521 AESGCM 256 TLS_AES_256_GCM_SHA384 </pre><pre> x1303 TLS_CHACHA20_POLY1305_SHA256 ECDH 521 ChaCha20 256 TLS_CHACHA20_POLY1305_SHA256 </pre><pre> x1301 TLS_AES_128_GCM_SHA256 ECDH 521 AESGCM 128 TLS_AES_128_GCM_SHA256 </pre><div><br></div><div><br></div><div>On Mon, 2021-12-06 at 15:06 +0000, Michael Wojcik wrote:</div><blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex"><blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex"><div>From: Dr. Matthias St. Pierre <<a href="mailto:Matthias.St.Pierre@ncp-e.com">Matthias.St.Pierre@ncp-e.com</a>></div><div>Sent: Monday, 6 December, 2021 07:53</div><div>To: Michael Wojcik <<a href="mailto:Michael.Wojcik@microfocus.com">Michael.Wojcik@microfocus.com</a>>; openssl-</div><div><br></div><div><br></div><blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex"><div>"Comparable elegant" is underspecified.</div></blockquote><div><br></div><div>(I guess, "Comparably elegant" would have been grammatically more</div><div>correct.)</div></blockquote><div><br></div><div>I just meant that elegance is in the eye of the beholder.</div><div><br></div><div>Many people might agree that having a single command line return the list of what suites the server supports is elegant, at least for the user. Others prefer the original UNIX philosophy of simpler tools which are scripted to perform more complex operations; that's the testssl.sh approach, and it's more elegant in the sense of being composed in a visible (and modifiable) way from smaller pieces.</div><div><br></div><div>A command-line option to s_client to do this sort of server profiling is conceivable, but it would be a significant departure from what s_client does now, since it would conflict with some other options and would involve making multiple connections. That doesn't mean it shouldn't be implemented, necessarily, just that it's not parallel to most of the other things s_client options do.</div><div><br></div><div>-- </div><div>Michael Wojcik</div></blockquote></body></html>