How to check supported ssl on server

Openssl and curl can be used to check the supported ssl version on a server

using openssl

Check if tlsv1 is supported

#openssl s_client -connect <hostname:port> -tls1

Check if tlsv1.2 is supported

#openssl s_client -connect <hostname:port> -tls1_2

If the protocol is not supported you see the below error (for TLSv1.2)

CONNECTED(0000003)140939040:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:339:

Using curl:

#curl -v -k --tlsv1 https://example.com/test.html#curl -v -k --tlsv1.1 https://example.com/test.html#curl -v -k --tlsv1.2 https://example.com/test.html

 

if the protocol is supported then the html page will load.

If not supported, then you will see a SSL connect error

Reference: https://ping.force.com/Support/PingIdentityArticle?id=kA3400000008RYSCA2

Leave a Reply

Your email address will not be published. Required fields are marked *