{"id":33499,"date":"2018-02-28T06:36:00","date_gmt":"2018-02-28T06:36:00","guid":{"rendered":"http:\/\/systemadmin.es\/?p=5124"},"modified":"2018-02-28T06:36:00","modified_gmt":"2018-02-28T06:36:00","slug":"comprobar-disponibilidad-de-protocolos-ssl","status":"publish","type":"post","link":"https:\/\/icloud.pe\/blog\/comprobar-disponibilidad-de-protocolos-ssl\/","title":{"rendered":"Comprobar disponibilidad de protocolos SSL"},"content":{"rendered":"<p>Para un determinado <strong>servicio SSL<\/strong> podemos verificar mediante <strong>openssl s_client<\/strong>. Vamos a ver c\u00f3mo:<\/p>\n<p><!-- more --><\/p>\n<p>El subcomando <strong>s_client<\/strong> dispone de opciones para indicar el protocolo a usar:<\/p>\n<pre>\r\necho | openssl s_client -connect systemadmin.es:443 -ssl3\r\necho | openssl s_client -connect systemadmin.es:443 -tls1_2\r\necho | openssl s_client -connect systemadmin.es:443 -tls1_1\r\necho | openssl s_client -connect systemadmin.es:443 -tls1\r\n<\/pre>\n<p>Por lo tanto simplemente <strong>buscando si se establece la sesi\u00f3n<\/strong> podemos ver si el protocolo esta soportado en el lado servidor:<\/p>\n<pre>\r\n# echo | openssl s_client -connect systemadmin.es:443 -tls1_2 2>&1 | grep \"Session-ID: \"\r\n    Session-ID: AA27E5EAC09CF474E38E8934B81CAE0D5759BFDAFAA0274AB37B38D6715F84EB\r\n# echo | openssl s_client -connect systemadmin.es:443 -ssl3 2>&1 | grep \"Session-ID: \"\r\n<\/pre>\n<p>Por lo tanto, podemos ver que en este caso <strong>TLS 1.2<\/strong> esta soportado mientras <strong>SSLv3<\/strong> no<\/p>\n<p>\tTags: <a href=\"http:\/\/systemadmin.es\/tag\/openssl\" title=\"openSSL\" rel=\"tag\">openSSL<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Para un determinado servicio SSL podemos verificar mediante openssl s_client. Vamos a ver c&oacute;mo: El subcomando s_client dispone de opciones para indicar el protocolo a usar: echo | openssl s_client -connect systemadmin.es:443 -ssl3 echo | openssl s_client -connect systemadmin.es:443 -tls1_2 echo | openssl s_client -connect systemadmin.es:443 -tls1_1 echo | openssl s_client -connect systemadmin.es:443 -tls1 Por [&hellip;]<\/p>\n","protected":false},"author":321,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5628,10],"tags":[],"class_list":["post-33499","post","type-post","status-publish","format-standard","hentry","category-openssl","category-seguridad"],"_links":{"self":[{"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/posts\/33499","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/users\/321"}],"replies":[{"embeddable":true,"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/comments?post=33499"}],"version-history":[{"count":2,"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/posts\/33499\/revisions"}],"predecessor-version":[{"id":41902,"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/posts\/33499\/revisions\/41902"}],"wp:attachment":[{"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/media?parent=33499"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/categories?post=33499"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/tags?post=33499"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}