LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 08-18-2016, 05:32 PM   #1
mrkrupp
LQ Newbie
 
Registered: Aug 2016
Posts: 2

Rep: Reputation: Disabled
Smile TLS / SSL versions


I am running Red Hat 7 and I would like to update my TLS / SSL versions to the latest. I'm new at running a web server so my questions are..

How do I check which version of TLS / SSL are currently installed?
How do I update them?

Thanks so much for your help!
 
Old 08-19-2016, 05:50 AM   #2
tshikose
Member
 
Registered: Apr 2010
Location: Kinshasa, Democratic Republic of Congo
Distribution: RHEL, Fedora, CentOS
Posts: 525

Rep: Reputation: 95
yum list openssl
yum update openssl
 
Old 08-19-2016, 05:49 PM   #3
mrkrupp
LQ Newbie
 
Registered: Aug 2016
Posts: 2

Original Poster
Rep: Reputation: Disabled
This is the version of OpenSSL I am running. How can I tell which version of TLS / SSL is currently being used? I don't want to update just yet before I figure that out.

Thanks for your help so far!

OpenSSL 1.0.1e-fips 11 Feb 2013
built on: Fri Apr 29 08:57:57 EDT 2016
platform: linux-x86_64
options: bn(64,64) md2(int) rc4(16x,int) des(idx,cisc,16,int) idea(int) blowfis h(idx)
compiler: gcc -fPIC -DOPENSSL_PIC -DZLIB -DOPENSSL_THREADS -D_REENTRANT -DDSO_DL FCN -DHAVE_DLFCN_H -DKRB5_MIT -m64 -DL_ENDIAN -DTERMIO -Wall -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer -size=4 -grecord-gcc-switches -m64 -mtune=generic -Wa,--noexecstack -DPURIFY - DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM _GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSA ES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM
OPENSSLDIR: "/etc/pki/tls"
 
Old 08-22-2016, 02:13 AM   #4
TenTenths
Senior Member
 
Registered: Aug 2011
Location: Dublin
Distribution: Centos 5 / 6 / 7
Posts: 3,475

Rep: Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553
Quote:
Originally Posted by mrkrupp View Post
This is the version of OpenSSL I am running. How can I tell which version of TLS / SSL is currently being used?

OpenSSL 1.0.1e-fips 11 Feb 2013
That version of OpenSSL will support up to TLS1.2

As for "what's currently being used", that'll depend on where it's being used and what it's configured to use by the application.

If you're using it on a website then run your website through https://www.ssllabs.com/ssltest/index.html which will give you a comprehensive breakdown of protocols and ciphers.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Ssl/tls jmomlhm Linux - Software 3 09-08-2012 01:53 AM
OpenLDAP and TLS-SSL karlochacon Linux - Server 5 02-03-2011 01:01 AM
[SOLVED] ip_conntrack_ftp and SSL / TLS Al_ Linux - Security 9 10-02-2009 02:37 PM
MITM in SSL/TLS gustavolinux Linux - Security 1 11-17-2008 12:16 PM
SSL vs. TLS X11 Linux - Security 8 12-17-2002 03:39 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 08:06 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration