How to check SSL connectivity
run the following command to test SSL connection
openssl s_client -connect <hostname>:<port>.
below are the complete options to use with s_client
command option | description | example |
---|---|---|
-connect | Tests connectivity to an HTTPS service. | openssl s_client -connect HOSTNAME:PORT |
-showcerts | Prints all certificates in the certificate chain presented by the SSL service | openssl s_client -connect HOSTNAME:PORT -showcerts |
-tls | Forces TLSv1 | openssl s_client -connect HOSTNAME:PORT -tls1_2 |
-cipher | Forces a specific cipher | openssl s_client -connect HOSTNAME:PORT -cipher ECDHE-RSA-AES256-GCM-SHA384 |