cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Join Customer Connection to register!
1090
Views
5
Helpful
6
Replies
Rps-Cheers
Rising star

Can we comfirm the IOS OpenSSL version ?

Hi  Everyone,

 

Our Customer need to check the OpenSSL version on CISCO Devices(CISCO7600,ISR, Cat6500,Nexus...).

Is there any method to check it? What should we do for check it?

 

Thx

6 REPLIES 6
Seb Rupik
VIP Advisor

Hi there,

On the cisco device documentation page, under 'Licensing Information' there should be a document detailing the open source information used in a release, eg:

https://www.cisco.com/c/en/us/support/switches/catalyst-6500-series-switches/products-licensing-information-listing.html

 

...however, as you will see, the release history is not always up to date or complete.

 

What are you trying to determine from the openSSL library version?

If you are trying to audit the ciphers, then take a look at this nmap script:

https://nmap.org/nsedoc/scripts/ssl-enum-ciphers.html

 

 

cheers,

Seb.

Thank you for your reply, but there doesn't seem to be a clear explanation of this issue, I just want to confirm the corresponding version of openssl under IOS
marce1000
VIP Advisor

 

 = Not direct, CISCO considers this a being proprietary due to use-rights and the integration in IOS and or XE,  ir can be obtained if there is a firm requirement through CISCO support.

 M.

So,whether we cannot obtain the openssl version?Do we need contact cisco tac?

 

 - Yes because it is not the same as getting this info on an open-source system.  It is considered proprietary information, besides it still being named as openssl....

 M.

OK,Thanks for your help,i also try to contact cisco tac.

BR