Re: [openssl-users] Getting info on the ciphers supported by a client

2015-03-10 Thread Jakob Bohm
On 09/03/2015 14:13, Waldin wrote: Am 08.03.2015 um 09:14 schrieb Waldin: Now, I also want to check ciphers enabled in (mobile) mail clients. I've tried to make OpenSSL listen on port 110 (for POP with TLS) and redirected the client to the OpenSSL server. But when trying to pull mail I can't

Re: [openssl-users] Getting info on the ciphers supported by a client

2015-03-09 Thread Waldin
Am 08.03.2015 um 09:14 schrieb Waldin: Now, I also want to check ciphers enabled in (mobile) mail clients. I've tried to make OpenSSL listen on port 110 (for POP with TLS) and redirected the client to the OpenSSL server. But when trying to pull mail I can't see any handshake information:

Re: [openssl-users] Getting info on the ciphers supported by a client

2015-03-09 Thread Christian Georg
Hi Ivan, I know the SSL Labs site. Great work you are doing there and I am using it frequently for server checks. For the client side I do however need to get the output on the server as I want to check our production mobile app, so no chance for me to get my hands on the content that was

Re: [openssl-users] Getting info on the ciphers supported by a client

2015-03-09 Thread Christian Georg
Hi Steve, thanks for the feedback. I was trying this again this morning and noticed a mistake I made. Not sure if this is intended behaviour. When combining the -www and -brief option in one call -brief does not create any output to stdout. So when using this:

Re: [openssl-users] Getting info on the ciphers supported by a client

2015-03-08 Thread Waldin
Sorry for chiming in with a related question. Am 06.03.2015 um 21:04 schrieb Dr. Stephen Henson: I'm not sure OpenSSL can do exactly what you want: 1.0.2 has an option to return the raw ciphersuite list sent by the client. The s_server utility will print this out if you set the -brief option.

Re: [openssl-users] Getting info on the ciphers supported by a client

2015-03-07 Thread Richard Moore
On 6 March 2015 at 14:05, Christian Georg christian.ge...@cologne-intelligence.de wrote: The tricky part are the supported cipher suites. When using the -www option I can return a website to the client showing the cipher suites that provide a match, which gets pretty close to what I want in

[openssl-users] Getting info on the ciphers supported by a client

2015-03-06 Thread Christian Georg
Hi all, I am trying to get detailed info on the protocols and cipher suites supported by a client app. Main goal is to verify that the constraints on protocols versions and cipher suites we are using within an app are working correctly. (so it is not about the cipher suites that are

Re: [openssl-users] Getting info on the ciphers supported by a client

2015-03-06 Thread Dr. Stephen Henson
On Fri, Mar 06, 2015, Christian Georg wrote: Any recommendations on how I can solve my issues without changing the openssl code and add this manually? I'm not sure OpenSSL can do exactly what you want: 1.0.2 has an option to return the raw ciphersuite list sent by the client. The s_server

Re: [openssl-users] Getting info on the ciphers supported by a client

2015-03-06 Thread Ivan Ristic
On Fri, Mar 6, 2015 at 2:05 PM, Christian Georg christian.ge...@cologne-intelligence.de wrote: Hi all, Christian, I might be able to save you some time. I wrote an SSL/TLS client test for the SSL Labs web site; you can find it here: https://dev.ssllabs.com/ssltest/viewMyClient.html If you