I have an application which connects to the server using ssl/tls protocol, what I want to know is in which cipher does it choses to do the handshake, my application server is on IIS win2008r2 , thou I can tell it to connect to which ever address.
I know such solution exists to check what types of ciphers the server is allowing (like sslscan, or the ssllabs website) but I need it the other way around.
Any ideas ?
You can use wireshark to look at request stream in order to see which cipher the client and server negotiated. I don’t think that the handshake is encrypted at this point so you shouldn’t even need to configure wireshark with the private key of the web server to decrypt the request stream.