命令提示符检查主机所需的TLS版本 [英] Command prompt to check TLS version required by a host

问题描述

是否存在用于检查主机站点需要的TLS版本的命令.现在，我知道要检查的唯一方法是调整浏览器的TLS最高版本，并检查是否仍然可以访问该网站.但是，我怀疑有更复杂的方法可以做到这一点.

Is there a command to check the TLS version reuired by a host site. Right now, the only way I know to check is by adjusting the max TLS version of my browser and checking if I can still access the site. However, I suspect there is a more sophisticated way to do this.

推荐答案

您可以使用以下命令进行检查

you can check using following commands

对于tls 1.2

openssl s_client -connect www.google.com:443 -tls1_2

openssl s_client -connect www.google.com:443 -tls1_2

对于tls 1.1

openssl s_client -connect www.google.com:443 -tls1_1

openssl s_client -connect www.google.com:443 -tls1_1

tls 1

openssl s_client -connect www.google.com:443 -tls1

openssl s_client -connect www.google.com:443 -tls1

如果获得证书链和握手，则支持tls版本.如果您没有看到证书链，并且类似于握手错误"，那么就没有.

If you get the certificate chain and the handshake then the tls version is supported. If you don't see the certificate chain, and something similar to "handshake error" then its not.

这篇关于命令提示符检查主机所需的TLS版本的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！