Checking What SSL and TLS Are In Use

Here’s another command to check what version of SSL and TLS is being used.

<pre lang="bash">
nmap --script ssl-enum-ciphers -p 443 server.domain.com

Result

<pre lang="bash">
PORT    STATE SERVICE
443/tcp open  https
| ssl-enum-ciphers: 
|   TLSv1.2: 
|     ciphers:
...

In this example, only TLSv1.2 is in use. For security purposes, use TLSv1.2 or higher.