I'm trying to diagnose a potential SSL/TLS problem between a Mac client and a Windows server. I have generated my own root cert and signed a cert for the server, and installed the root cert on the Mac client. When I try to connect to the server from the mac like this
echo quit | openssl s_client -connect newmail.example.com:443 -CAfile ~/Downloads/myroot.cer
I see these results
--- SSL handshake has read 1365 bytes and written 456 bytes --- New, TLSv1/SSLv3, Cipher is AES256-SHA Server public key is 2048 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE SSL-Session: Protocol : TLSv1 Cipher : AES256-SHA Session-ID: DE2800000D2050CAB6CEE9136CD377998559C46C7AD57A1062907EE417457DE0 Session-ID-ctx: Master-Key: 24E2BE661880D703B7033E0F723323296C26ECEDA0BA79493AE134C7F03EEBD765692C9DF10933BE213FF4E0F89771AC Key-Arg : None Start Time: 1458249776 Timeout : 300 (sec) Verify return code: 0 (ok) --- DONE
Do these results mean that the HIGHEST level of protocol negotiated is TLSv1 ? (Which I suspect is causing my app problem)? Shouldn't this be TLS 1.2 ?