output.txt

«treq» thomasina ♞ :~/code/treq (master|…1) [1]                                                                         
↪︎ python t.py 
{u'beast_vuln': False,
 u'ephemeral_keys_supported': True,
 u'given_cipher_suites': [u'TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384',
                          u'TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384',
                          u'TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384',
                          u'TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384',
                          u'TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA',
                          u'TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA',
                          u'TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA',
                          u'TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA',
                          u'TLS_DHE_DSS_WITH_AES_256_GCM_SHA384',
                          u'TLS_DHE_RSA_WITH_AES_256_GCM_SHA384',
                          u'TLS_DHE_RSA_WITH_AES_256_CBC_SHA256',
                          u'TLS_DHE_DSS_WITH_AES_256_CBC_SHA256',
                          u'TLS_DHE_RSA_WITH_AES_256_CBC_SHA',
                          u'TLS_DHE_DSS_WITH_AES_256_CBC_SHA',
                          u'TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA',
                          u'TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA',
                          u'TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384',
                          u'TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384',
                          u'TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384',
                          u'TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384',
                          u'TLS_ECDH_RSA_WITH_AES_256_CBC_SHA',
                          u'TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA',
                          u'TLS_RSA_WITH_AES_256_GCM_SHA384',
                          u'TLS_RSA_WITH_AES_256_CBC_SHA256',
                          u'TLS_RSA_WITH_AES_256_CBC_SHA',
                          u'TLS_RSA_WITH_CAMELLIA_256_CBC_SHA',
                          u'TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA',
                          u'TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA',
                          u'TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA',
                          u'TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA',
                          u'TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA',
                          u'TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA',
                          u'TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA',
                          u'TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA',
                          u'TLS_RSA_WITH_3DES_EDE_CBC_SHA',
                          u'TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256',
                          u'TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256',
                          u'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256',
                          u'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256',
                          u'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA',
                          u'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA',
                          u'TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA',
                          u'TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA',
                          u'TLS_DHE_DSS_WITH_AES_128_GCM_SHA256',
                          u'TLS_DHE_RSA_WITH_AES_128_GCM_SHA256',
                          u'TLS_DHE_RSA_WITH_AES_128_CBC_SHA256',
                          u'TLS_DHE_DSS_WITH_AES_128_CBC_SHA256',
                          u'TLS_DHE_RSA_WITH_AES_128_CBC_SHA',
                          u'TLS_DHE_DSS_WITH_AES_128_CBC_SHA',
                          u'TLS_DHE_RSA_WITH_SEED_CBC_SHA',
                          u'TLS_DHE_DSS_WITH_SEED_CBC_SHA',
                          u'TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA',
                          u'TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA',
                          u'TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256',
                          u'TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256',
                          u'TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256',
                          u'TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256',
                          u'TLS_ECDH_RSA_WITH_AES_128_CBC_SHA',
                          u'TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA',
                          u'TLS_RSA_WITH_AES_128_GCM_SHA256',
                          u'TLS_RSA_WITH_AES_128_CBC_SHA256',
                          u'TLS_RSA_WITH_AES_128_CBC_SHA',
                          u'TLS_RSA_WITH_SEED_CBC_SHA',
                          u'TLS_RSA_WITH_CAMELLIA_128_CBC_SHA',
                          u'TLS_RSA_WITH_IDEA_CBC_SHA',
                          u'TLS_ECDHE_RSA_WITH_RC4_128_SHA',
                          u'TLS_ECDHE_ECDSA_WITH_RC4_128_SHA',
                          u'TLS_ECDH_RSA_WITH_RC4_128_SHA',
                          u'TLS_ECDH_ECDSA_WITH_RC4_128_SHA',
                          u'TLS_RSA_WITH_RC4_128_SHA',
                          u'TLS_RSA_WITH_RC4_128_MD5',
                          u'TLS_DHE_RSA_WITH_DES_CBC_SHA',
                          u'TLS_DHE_DSS_WITH_DES_CBC_SHA',
                          u'TLS_RSA_WITH_DES_CBC_SHA',
                          u'TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA',
                          u'TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA',
                          u'TLS_RSA_EXPORT_WITH_DES40_CBC_SHA',
                          u'TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5',
                          u'TLS_RSA_EXPORT_WITH_RC4_40_MD5',
                          u'TLS_EMPTY_RENEGOTIATION_INFO_SCSV'],
 u'insecure_cipher_suites': {u'TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA': [u'uses keys smaller than 128 bits in its encryption'],
                             u'TLS_DHE_DSS_WITH_DES_CBC_SHA': [u'uses keys smaller than 128 bits in its encryption'],
                             u'TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA': [u'uses keys smaller than 128 bits in its encryption'],
                             u'TLS_DHE_RSA_WITH_DES_CBC_SHA': [u'uses keys smaller than 128 bits in its encryption'],
                             u'TLS_RSA_EXPORT_WITH_DES40_CBC_SHA': [u'uses keys smaller than 128 bits in its encryption'],
                             u'TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5': [u'uses keys smaller than 128 bits in its encryption'],
                             u'TLS_RSA_EXPORT_WITH_RC4_40_MD5': [u'uses keys smaller than 128 bits in its encryption'],
                             u'TLS_RSA_WITH_DES_CBC_SHA': [u'uses keys smaller than 128 bits in its encryption']},
 u'rating': u'Bad',
 u'session_ticket_supported': True,
 u'tls_compression_supported': True,
 u'tls_version': u'TLS 1.2',
 u'unknown_cipher_suite_supported': False}

t.py

import pprint

from twisted.internet.task import react
import treq

def main(reactor, *args):
    d = treq.get("https://www.howsmyssl.com/a/check")
    d.addCallback(treq.json_content)
    d.addCallback(pprint.pprint)

    return d

react(main, [])

Status with Twisted from trunk and pyOpenSSL from master on OS X:

{u'able_to_detect_n_minus_one_splitting': True,
 u'beast_vuln': False,
 u'ephemeral_keys_supported': True,
 u'given_cipher_suites': [u'TLS_DHE_RSA_WITH_AES_256_CBC_SHA',
                          u'TLS_DHE_RSA_WITH_AES_128_CBC_SHA',
                          u'TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA',
                          u'TLS_RSA_WITH_AES_256_CBC_SHA',
                          u'TLS_RSA_WITH_AES_128_CBC_SHA',
                          u'TLS_RSA_WITH_3DES_EDE_CBC_SHA',
                          u'TLS_EMPTY_RENEGOTIATION_INFO_SCSV'],
 u'insecure_cipher_suites': {},
 u'rating': u'Bad',
 u'session_ticket_supported': False,
 u'tls_compression_supported': False,
 u'tls_version': u'TLS 1.0',
 u'unknown_cipher_suite_supported': False}