How to check if TLS 1.0 is enabled

Hi, you can find the default cipher list in the link which is https://support.f5.com/kb/en-us/solutions/public/13000/100/sol13156.html

 

If you have question, i want to help you

 

• (Config check method) Replace DEFAULT with the actual cipher string in your clientssl profile (or serverssl profile)

In BigIP BASH shell:

 

tmm --clientciphers "DEFAULT"
tmm --serverciphers "DEFAULT"

 

If any lines of the output include PROT = TLS1, it's enabled, otherwise not.

• (SSL handshake check with cURL)

  curl -k --tlsv1 https://somesite.com

If output contains cURL (35) error code, TLSv1 is not available.

• In case of publicly available web-sites, you can use many of the available online SSL-checkers (https://www.digicert.com/help, Qualys, Symantec...)

You can always verify by using nmap against one of your virtual servers using the SSL profile in question.

 

Download NMAP Then run:

 

nmap --script ssl-enum-ciphers -p 443 www.mysite.com

 

-p indicates the port the server is listening on. You can point it to a FQDN for an ip address.