{"uid":"cap_QNSAtnHY9AFxAVa4skRSZ","slug":"halowerk-sicherwerk-tls-1-2-cipher-policy-expander-ce01d383","name":"HALOWERK sicherwerk TLS 1.2 Cipher Policy Expander","description":"Takes a cipher policy in OpenSSL syntax and resolves it into the concrete list of TLS 1.2 cipher suites that the pinned build would actually offer, in the order it would offer them. This closes the gap between a policy string in a configuration file and what a server ends up negotiating: aliases expand, exclusions apply, and suites below the build's security level drop out silently in normal operation. Here they simply do not appear in the list, and the count says how many survived.","url":"https://sicher.halowerk.com/v1/oss-openssl-tls12-cipher-policy-expand?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"cipher_rule":{"type":"string","pattern":"^[A-Za-z0-9_:@!+.,=\\-]{1,256}$"}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.001","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.001/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_FDQJ34WhyLM1wdPptxmOG","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.001","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Expands an OpenSSL cipher policy string into the concrete ordered list of TLS 1.2 cipher suites that the pinned OpenSSL build would actually negotiate","exampleAgentPrompt":"What TLS 1.2 cipher suites would actually be offered if I set my OpenSSL cipher rule to HIGH:!aNULL:!MD5:!RC4 — can you expand that policy and show me the full ordered list?","exampleUseCases":[{"title":"Pre-deployment cipher policy audit","prompt":"Before I deploy this nginx config, expand the cipher rule ECDH+AESGCM:DH+AESGCM:ECDH+AES256:!aNULL:!eNULL:!EXPORT and tell me the exact ordered list of TLS 1.2 suites my server will offer."},{"title":"Compliance verification for cipher strength","prompt":"I need to confirm that my cipher policy ALL:!EXPORT:!LOW:!MEDIUM covers only strong suites — expand it and show me which TLS 1.2 ciphers survive the filter."},{"title":"Debugging unexpected cipher negotiation","prompt":"My load balancer is negotiating a weaker cipher than I expected. Expand the policy string ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:!MD5 so I can see exactly what's in the list and in what order."}],"resultDescription":"Returns an ordered list of TLS 1.2 cipher suite names that the pinned OpenSSL build would offer after applying all aliases, exclusions, and security-level filters from the supplied policy string, along with a count of surviving suites.","failureModes":["Invalid or malformed cipher_rule string (rejects characters outside allowed pattern)","Cipher rule that resolves to an empty set (all suites excluded)","Input string exceeds 256-character limit","Policy uses unsupported aliases not recognized by the pinned OpenSSL build","Payment failure or insufficient USDC balance via x402 protocol"],"whenToPreferThis":"Use this endpoint when you need deterministic, build-specific expansion of an OpenSSL cipher policy string rather than a generic reference list. It accounts for the exact security level and build flags of the pinned OpenSSL binary, so suites that would be silently dropped in practice are absent from the output — making it authoritative for pre-deployment audits, compliance checks, and debugging unexpected TLS negotiation behavior.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-29T00:31:46.143Z","isFirstParty":false,"canonicalSlug":"halowerk-sicherwerk-tls-1-2-cipher-policy-expander-ce01d383"}