Can we comfirm the IOS OpenSSL version ?

[Rps-Cheers]

Hi  Everyone,

Our Customer need to check the OpenSSL version on CISCO Devices(CISCO7600,ISR, Cat6500,Nexus...).

Is there any method to check it? What should we do for check it?

Thx

[Seb Rupik]

Hi there,

On the cisco device documentation page, under 'Licensing Information' there should be a document detailing the open source information used in a release, eg:

https://www.cisco.com/c/en/us/support/switches/catalyst-6500-series-switches/products-licensing-information-listing.html

...however, as you will see, the release history is not always up to date or complete.

What are you trying to determine from the openSSL library version?

If you are trying to audit the ciphers, then take a look at this nmap script:

https://nmap.org/nsedoc/scripts/ssl-enum-ciphers.html

cheers,

Seb.

[Rps-Cheers]

Thank you for your reply, but there doesn't seem to be a clear explanation of this issue, I just want to confirm the corresponding version of openssl under IOS

[marce1000]

 = Not direct, CISCO considers this a being proprietary due to use-rights and the integration in IOS and or XE,  ir can be obtained if there is a firm requirement through CISCO support.

 M.

[Rps-Cheers]

So，whether we cannot obtain the openssl version？Do we need contact cisco tac？

[marce1000]

 - Yes because it is not the same as getting this info on an open-source system.  It is considered proprietary information, besides it still being named as openssl....

 M.

[Rps-Cheers]

OK,Thanks for your help,i also try to contact cisco tac.

BR