topic Re: OpenSSL version in IOS & IOS XE in Network Security

OpenSSL version in IOS & IOS XE

Lukas Runge — Tue, 06 Jun 2023 06:27:54 GMT

Hello!

I need a command with which I can check the OpenSSL version in IOS and IOS XE.
For Catalyst switches and ASR routers.

On my Nexus devices I either use the bash shell or I use the "ssh -v source-ip" command. Both of those aren't working for IOS / IOS XE. The "show tech-support" doesn't contain this information either.

Is there any possibility at all? So far no luck with my TAC cases I opened for this topic.

Best regards.

Re: OpenSSL version in IOS & IOS XE

M02@rt37 — Tue, 06 Jun 2023 07:07:48 GMT

Hello @Lukas Runge,

When an IOS image is released, it is linked to a single OpenSSL version. Provide Cisco with the exact IOS image name, and they can return the OpenSSL version for that image to you.

Re: OpenSSL version in IOS & IOS XE

Lukas Runge — Tue, 06 Jun 2023 08:08:59 GMT

Hi M02@rt37

Thank you for the quick response.
This is how we track it so far. Each 3 months we open 6 new TAC cases for the new software versions (1 TAC case per hardware platform) and start playing ping pong with the TAC engineers who always start with "please prove a show tech...." This is very time consuming tbh.

Is there any way for the customer to check the OpenSSL version? In the release notes I can't find anything. A command to check it myself would be the best.

BR Lukas