-
run the following command to test SSL connection
openssl s_client -connect <hostname>:<port>.
-
below are the complete options to use with s_client
|
command option |
description |
example |
|---|---|---|
|
-connect |
Tests connectivity to an HTTPS service. |
openssl s_client -connect HOSTNAME:PORT |
|
-showcerts |
Prints all certificates in the certificate chain presented by the SSL service |
openssl s_client -connect HOSTNAME:PORT -showcerts |
|
-tls |
Forces TLSv1 |
openssl s_client -connect HOSTNAME:PORT -tls1_2 |
|
-cipher |
Forces a specific cipher |
openssl s_client -connect HOSTNAME:PORT -cipher ECDHE-RSA-AES256-GCM-SHA384 |