sysadmin

Usefull sysadmin stuff

I'm working as a sysadmin/Application Engineer/Application Manager/DevOps Engineer (yeah, buzzwords, I know) for a number of years now and there I learn a lot of cool and handy stuff which I want to share for the benefit of others.

Check available security ciphers


#!/usr/bin/env bash

# OpenSSL requires the port number.
SERVER=$1
DELAY=1
ciphers=$(openssl ciphers 'ALL:eNULL' | sed -e 's/:/ /g')

echo Obtaining cipher list from $(openssl version).

for cipher in ${ciphers[@]}
do
echo -n Testing $cipher...
result=$(echo -n | openssl s_client -cipher "$cipher" -connect $SERVER
2>&1)
if [[ "$result" =~ ":error:" ]] ; then
  error=$(echo -n $result | cut -d':' -f6)
  echo NO \($error\)
else
  if [[ "$result" =~ "Cipher is ${cipher}" || "$result" =~ "Cipher    :" ]] ; then
    echo YES
  else
    echo UNKNOWN RESPONSE
    echo $result
  fi
fi
sleep $DELAY
done

Usage: ./script.sh example.com:443

Credits go to Romeo Ninov and indiv. Script taken from https://superuser.com.