Re: How can I tell if our transmissins are using TLS 1.2

Hello Alan,

Am 16.10.2019 um 14:53 schrieb Alan Shore via MIDRANGE-L <midrange-l@xxxxxxxxxxxxxxxxxx>:

This past weekend we performed an ipl
No updates
Just an ipl

Were there updates installed beforehand eventually but without IPL?

Are we no longer transmitting using TLS 1.2?
We are on V7r3
Does anyone know how I can tell if we are transmitting using TLS 1.2?

You are building an active connection to the peer, right?

Have there been changes in an in-between-firewall, maybe? Some models decrypt SSL traffic to inspect their insides for malware, then re-encrypt it with a on-the-fly certificate, signed by the CA on the firewall. This should be transparent to the client but it can cause all sort of random troubles.

I don't know if the application in question utilizes openssl for crypto services but if it does, you can call a pase shell and try openssl s_client -connect <servername-or-ip>:443 (or whatever port they're using). You'll get a lot of output and also block at the end stating parameters.

Hope this helps.

:wq! PoC

PGP-Key: DDD3 4ABF 6413 38DE - https://www.pocnet.net/poc-key.asc