How to check supported ssl on server

Openssl and curl can be used to check the supported ssl version on a server

using openssl

Check if tlsv1 is supported

#openssl s_client -connect <hostname:port> -tls1

Check if tlsv1.2 is supported

#openssl s_client -connect <hostname:port> -tls1_2

If the protocol is not supported you see the below error (for TLSv1.2)

CONNECTED(0000003)140939040:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:339:

Using curl:

#curl -v -k --tlsv1 -v -k --tlsv1.1 -v -k --tlsv1.2


if the protocol is supported then the html page will load.

If not supported, then you will see a SSL connect error


Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.