SSL Audit

SSL Audit is a lightweight piece of software that enables you to manage web servers more efficiently. To be more precise, the role of the application is to scan these servers for SSL support and consequentially, it is capable of detecting all know cipher suites.

It is worth mentioning that unlike similar tools, the app is not limited to ciphers supported by SSL engines that are commonly known, namely NSS or OpenSSL. Functionality-wise, the program is as simple as it looks, meaning that all you need to do is enter the host and the port the SSL service listens and the tool does the rest.

The utility comes with an interesting experimental function dubbed Fingerprint that enables you to determine the SSL Engine used on the server side. The mechanic is that the app sends normal and malformed SSL packets that are interpreted in different ways.

Nevertheless, the tool can distinguish only a few SSL Engines, namely Certicom, RSA BSAFE, Apache OpenSSL and NSS, IIS 6.0, IIS 7.0 and IIS 7.5 Schannel. As far as interpreting the results goes, the higher the score, the more likely the host is using that particular engine. You should bear in mind that load balancers and SSL accelerators usually give unlikely results.