Hi there,
I'm trying to understand what version of TLS is used for the 'Simple' authentication type, does anyone have an idea?
Hopefully its not TLS v1.1 ?
many thanks
Answer
Ldap with Jumpcloud
+3Best answer by johandahl
It is TLS v1.2
echo -n | openssl s_client -connect ldap.jumpcloud.com:636 -showcerts
lots of output
...
SSL-Session:
Protocol : TLSv1.2 <==== HERE
Cipher : ECDHE-RSA-AES256-GCM-SHA384
Session-ID: E556339AA95104FA6690B4D6612967025DEE1B2D9A7CFBCF62C94FB112670A2E
Session-ID-ctx:
Master-Key: 95D540E3D0A5DA140D66217E4E472CC733D4C0B8C32E45C5E44825C433EF024D9A7ADD2184CDCE2412230C385BB2EA49
Key-Arg : None
Krb5 Principal: None
PSK identity: None
PSK identity hint: None
TLS session ticket lifetime hint: 300 (seconds)
TLS session ticket:
0000 - f8 86 0e 17 cf f7 b8 7d-f7 96 ef 88 54 a4 46 42 .......}....T.FB
0010 - a8 12 30 05 9e 5c 04 39-c6 80 9f 14 81 d7 59 59 ..0..\\.9......YY
0020 - ea 26 be 35 3f 11 d5 44-3e 14 fd 0f 56 88 63 fb .&.5?..D>...V.c.
0030 - a9 d0 1d 83 d2 f0 ba 57-88 18 f6 5b 67 5d f3 67 .......W...[g].g
0040 - fa 23 13 9d 4d b6 c0 06-9e ca b2 3e 86 4f 92 4b .#..M......>.O.K
0050 - 87 af 9e 59 04 8c ee 5c-b7 59 43 53 8d 9f ad 41 ...Y...\\.YCS...A
0060 - fe a7 cf 7f f6 f8 8b c2-9f 80 ca 1d 4e 70 31 98 ............Np1.
0070 - 9c 2e 75 5f 9a 30 4c 0f-33 12 93 69 97 ee 95 e7 ..u_.0L.3..i....
0080 - 2e 3d 04 ba eb 97 a0 9f-dc 8f 08 47 95 46 59 5f .=.........G.FY_
0090 - 07 64 2f 8f 8b f4 fc 33-37 31 ec 11 ca 58 92 35 .d/....371...X.5
Start Time: 1636039746
Timeout : 300 (sec)
Verify return code: 0 (ok)
---
DONE
+6It is TLS v1.2
echo -n | openssl s_client -connect ldap.jumpcloud.com:636 -showcerts
lots of output
...
SSL-Session:
Protocol : TLSv1.2 <==== HERE
Cipher : ECDHE-RSA-AES256-GCM-SHA384
Session-ID: E556339AA95104FA6690B4D6612967025DEE1B2D9A7CFBCF62C94FB112670A2E
Session-ID-ctx:
Master-Key: 95D540E3D0A5DA140D66217E4E472CC733D4C0B8C32E45C5E44825C433EF024D9A7ADD2184CDCE2412230C385BB2EA49
Key-Arg : None
Krb5 Principal: None
PSK identity: None
PSK identity hint: None
TLS session ticket lifetime hint: 300 (seconds)
TLS session ticket:
0000 - f8 86 0e 17 cf f7 b8 7d-f7 96 ef 88 54 a4 46 42 .......}....T.FB
0010 - a8 12 30 05 9e 5c 04 39-c6 80 9f 14 81 d7 59 59 ..0..\\.9......YY
0020 - ea 26 be 35 3f 11 d5 44-3e 14 fd 0f 56 88 63 fb .&.5?..D>...V.c.
0030 - a9 d0 1d 83 d2 f0 ba 57-88 18 f6 5b 67 5d f3 67 .......W...[g].g
0040 - fa 23 13 9d 4d b6 c0 06-9e ca b2 3e 86 4f 92 4b .#..M......>.O.K
0050 - 87 af 9e 59 04 8c ee 5c-b7 59 43 53 8d 9f ad 41 ...Y...\\.YCS...A
0060 - fe a7 cf 7f f6 f8 8b c2-9f 80 ca 1d 4e 70 31 98 ............Np1.
0070 - 9c 2e 75 5f 9a 30 4c 0f-33 12 93 69 97 ee 95 e7 ..u_.0L.3..i....
0080 - 2e 3d 04 ba eb 97 a0 9f-dc 8f 08 47 95 46 59 5f .=.........G.FY_
0090 - 07 64 2f 8f 8b f4 fc 33-37 31 ec 11 ca 58 92 35 .d/....371...X.5
Start Time: 1636039746
Timeout : 300 (sec)
Verify return code: 0 (ok)
---
DONE
+3It is TLS v1.2
echo -n | openssl s_client -connect ldap.jumpcloud.com:636 -showcerts
lots of output
...
SSL-Session:
Protocol : TLSv1.2 <==== HERE
Cipher : ECDHE-RSA-AES256-GCM-SHA384
Session-ID: E556339AA95104FA6690B4D6612967025DEE1B2D9A7CFBCF62C94FB112670A2E
Session-ID-ctx:
Master-Key: 95D540E3D0A5DA140D66217E4E472CC733D4C0B8C32E45C5E44825C433EF024D9A7ADD2184CDCE2412230C385BB2EA49
Key-Arg : None
Krb5 Principal: None
PSK identity: None
PSK identity hint: None
TLS session ticket lifetime hint: 300 (seconds)
TLS session ticket:
0000 - f8 86 0e 17 cf f7 b8 7d-f7 96 ef 88 54 a4 46 42 .......}....T.FB
0010 - a8 12 30 05 9e 5c 04 39-c6 80 9f 14 81 d7 59 59 ..0..\\.9......YY
0020 - ea 26 be 35 3f 11 d5 44-3e 14 fd 0f 56 88 63 fb .&.5?..D>...V.c.
0030 - a9 d0 1d 83 d2 f0 ba 57-88 18 f6 5b 67 5d f3 67 .......W...[g].g
0040 - fa 23 13 9d 4d b6 c0 06-9e ca b2 3e 86 4f 92 4b .#..M......>.O.K
0050 - 87 af 9e 59 04 8c ee 5c-b7 59 43 53 8d 9f ad 41 ...Y...\\.YCS...A
0060 - fe a7 cf 7f f6 f8 8b c2-9f 80 ca 1d 4e 70 31 98 ............Np1.
0070 - 9c 2e 75 5f 9a 30 4c 0f-33 12 93 69 97 ee 95 e7 ..u_.0L.3..i....
0080 - 2e 3d 04 ba eb 97 a0 9f-dc 8f 08 47 95 46 59 5f .=.........G.FY_
0090 - 07 64 2f 8f 8b f4 fc 33-37 31 ec 11 ca 58 92 35 .d/....371...X.5
Start Time: 1636039746
Timeout : 300 (sec)
Verify return code: 0 (ok)
---
DONE
thank you so much !
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.