Skip to content

Instantly share code, notes, and snippets.

@jmhodges

jmhodges/gist:8273329

Created January 5, 2014 20:21
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save jmhodges/8273329 to your computer and use it in GitHub Desktop.
Save jmhodges/8273329 to your computer and use it in GitHub Desktop.
Download ZIP
Amazon's TLS is sad. When given far better options by the client, it still uses TLS 1.0 and ancient ciphers.
Raw
gistfile1.txt
$ # This DYLD_LIBRARY_PATH is because the default OS X 10.8 (and, I think, 10.9) still doesn't have
$ # a modern OpenSSL installation. You'll want `openssl version` to be 1.0.1e, at least.
$ DYLD_LIBRARY_PATH=/usr/local/ssl/lib:$DYLD_LIBRARY_PATH /usr/local/ssl/bin/openssl s_client -connect console.aws.amazon.com:443 < /dev/null 2>/dev/null | egrep '(Protocol|Cipher)\s+:'
Protocol : TLSv1
Cipher : RC4-MD5
$ # :( :( The same result for aws.amazon.com. Amazon.com still uses TLS 1.0 and RC4-SHA, too!
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment