0

I just need to know if this server i compatible with TLS 1.2, through this message:

remote:~ Xserver$ openssl s_client -connect X:443 -tls1_2
CONNECTED(00000003)
140735304528736:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:362:
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 5 bytes and written 7 bytes
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : 0000
    Session-ID: 
    Session-ID-ctx: 
    Master-Key: 
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1480093191
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
---

Anyone?

5
  • 1
    Verify return code: 0 (ok) means yes... you could also check ssllabs – Jacob Evans Nov 25 '16 at 17:28
  • this means that it supports? i will check that – marafado88 Nov 25 '16 at 17:29
  • 1
    you forced the connection over tls 1.2, so it's works, but there's no cert – Jacob Evans Nov 25 '16 at 17:30
  • letsencrypt my friend. – Jacob Evans Nov 25 '16 at 17:32
  • Thanks a lot Jacob! The other ssllabs is a pretty amazing tool! – marafado88 Nov 25 '16 at 17:42
1

Partially, the server support TLS 1.2 but you didn't send a cert to actually do the encryption.

Also TLS1.2 was standards in 2008.

https://www.feistyduck.com/ssl-tls-and-pki-history/

1

Protocol : TLSv1.2
...
Verify return code: 0 (ok)

It seems to be yes.

0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.