cloud engineer
Here’s another command to check what version of SSL and TLS is being used.
nmap --script ssl-enum-ciphers -p 443 server.domain.com |
nmap --script ssl-enum-ciphers -p 443 server.domain.com
Result
PORT STATE SERVICE 443/tcp open https | ssl-enum-ciphers: | TLSv1.2: | ciphers: ... |
PORT STATE SERVICE 443/tcp open https | ssl-enum-ciphers: | TLSv1.2: | ciphers: ...
In this example, only TLSv1.2 is in use. For security purposes, use TLSv1.2 or higher.
Here’s the command to list what SSL and TLS protocols are active.
openssl ciphers -v | awk '{print $2}' | sort | uniq |
openssl ciphers -v | awk '{print $2}' | sort | uniq
Netstat is a utility for gathering network statistics. It comes preinstalled on most systems.
If missing, here’s how to install.
# Redhat, CentOS yum install net-tools # Debian, Ubuntu, Mint apt install net-tools # SLES, SUSE zypper install net-tools |
# Redhat, CentOS yum install net-tools # Debian, Ubuntu, Mint apt install net-tools # SLES, SUSE zypper install net-tools
Here are some common and useful commands.
# show version netstat -v # show routing table netstat -nr # show network interface statistics netstat -ai # show network connections netstat -ant # show network services netstat -tulpn |
# show version netstat -v # show routing table netstat -nr # show network interface statistics netstat -ai # show network connections netstat -ant # show network services netstat -tulpn