Confirm which encryption cipher is being used

Products

• VMware Smart Assurance

Issue/Introduction

TLS v1.2 is the only protocol enabled by default in new installations for all secure communications, including internal communications and communications between the user interface and the web browser. 

If not specified any cipher supported by TLS v1.2 could be used.


In some cases you may want to see specifically which cipher is being used.

Environment

Watch4Net/M&R 7.x

Resolution

To check which cipher is currently being used.

1. Log into the CLI of your Watch4net host. 
2. Run the following command

openssl s_client -connect localhost:48443 -msg -debug

This will show in plain text what cipher is being used. For Example:
SSL-Session:
     Protocol : TSLv1.2
     Cipher    : ECDHE-RSA-AES128-GCM-SHA256