I am using CentOS 7. I want to check whether remote web server supports TLS1.3 or not.

I have tried through nmap but till date, nmap (version 7.80) doesn’t supports TLS1.3

Is there an easy way to check for that?

  • Wouldn't openssl allow you to do that? – Gerard H. Pille May 1 '20 at 15:47
  • curl https://<server>/ --verbose Source – Peleion May 1 '20 at 16:21

I am pretty sure openssl (you need at least version 1.1.1) is able to do this.

openssl s_client -connect www.example.com:443 -tls1_3

See https://raymii.org/s/tutorials/OpenSSL_test_TLSv1.3_connection_with_s_client.html as well.

  • This openssl command is giving too much data. This i have to use in my script, so I want a easiest way to find out the tls1.3 support without too much grep/sed. – Gaurav Kansal May 2 '20 at 9:55

Openssl s_client -connect ip:port -tls1_3

It can help....

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.