List supported SSL/TLS versions for a specific OpenSSL build

LinuxSslOpenssl

Linux Problem Overview

I have, for example, OpenSSL version 1.0.0o on my Linux system, and I want to know which SSL/TLS versions are supported with this build.

Is there a shell command to accomplish this?

Linux Solutions

Solution 1 - Linux

Use this

openssl ciphers -v | awk '{print $2}' | sort | uniq

Solution 2 - Linux

You can not check for version support via command line. Best option would be checking OpenSSL changelog.

Openssl versions till 1.0.0h supports SSLv2, SSLv3 and TLSv1.0. From Openssl 1.0.1 onward support for TLSv1.1 and TLSv1.2 is added.

Solution 3 - Linux

This worked for me:

openssl s_client -help 2>&1  > /dev/null | egrep "\-(ssl|tls)[^a-z]"

Please let me know if this is wrong.

Solution 4 - Linux

It's clumsy, but you can get this from the usage messages for s_client or s_server, which are #ifed at compile time to match the supported protocol versions. Use something like

 openssl s_client -help 2>&1 | awk '/-ssl[0-9]|-tls[0-9]/{print $1}' 
 # in older releases any unknown -option will work; in 1.1.0 must be exactly -help

Solution 5 - Linux

Try the following command:

openssl ciphers

This should produce a list of all of the ciphers supported in your version of openssl.

To see just a particular set of ciphers (e.g. just sslv3 ciphers) try:

openssl ciphers -ssl3

See https://www.openssl.org/docs/apps/ciphers.html for more info.

Solution 6 - Linux

When you run OPENSSL command using s_client this is the output. See the Cipher, if the cipher NULL it means that version of TLS is not supported.

TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1
    Cipher    : ECDHE-RSA-AES256
    Session-ID: A84600002D4945DE6
    Session-ID-ctx:
    Master-Key:  
    Start Time: 15852343333860
    Timeout   : 2343 (sec)
    Verify return code: 0 (ok)
Categories
Recommended Linux Solutions
Recommended Ssl Solutions
Recommended Openssl Solutions

Previous Solution:

Seek Bar thumb not transparent in Android 5.0 API 21 Lollipop

AndroidTransparencyAndroid 5.0-Lollipop

Next Solution:

Why Android Studio is slowing down when editing xml file or changing the design?

AndroidPerformanceAndroid LayoutAndroid Studio

Attributions

All content for this solution is sourced from the original question on Stackoverflow.

The content on this page is licensed under the Attribution-ShareAlike 4.0 International (CC BY-SA 4.0) license.

Content TypeOriginal AuthorOriginal Content on Stackoverflow
QuestionLeviathanView Question on Stackoverflow
Solution 1 - LinuxFerView Answer on Stackoverflow
Solution 2 - LinuxNPCView Answer on Stackoverflow
Solution 3 - LinuxS SquareView Answer on Stackoverflow
Solution 4 - Linuxdave_thompson_085View Answer on Stackoverflow
Solution 5 - Linuxmti2935View Answer on Stackoverflow
Solution 6 - LinuxsecuritygeekView Answer on Stackoverflow