In trying to catch this type of problem on my turf, I built my own scanner after getting frustrated with the current options (*cough* testssl.sh and its 24kloc

In trying to catch this type of problem on my turf, I built my own scanner after getting frustrated with the current options (*cough* testssl.sh and its 24kloc of bash *cough*): https://github.com/boppreh/hello_tls https://github.com/boppreh/hello_tls The cool thing is that you only need Client/Server Hello, which happens before any encryption. So the tool can be fast even though it's written in pure dependency-less Python (pyOpenSSL being optional if you want certificate info). I'm frequently adding new features, so suggestions and bug reports are appreciated.