How to find if a webserver is using SSL or TLS

Hello, I received the following from message from Salesforce:  "As an administrator of a Salesforce org that may have recently been accessed using SSL 3.0 encryption, we want to inform you of a change regarding supported encryption protocols. Over the next two months, Salesforce will be disabling SSL 3.0 encryption in a phased approach to prevent it from being used to access the Salesforce platform. "

Salesforce is doing this because of a security vulnerability that affects SSL 3.0.  They are going to use TLS 1.0 encryption or higher.

I would like to find out how to find if our webserver is using SSL 3.0 or TLS.  Also, if it is not using TSL how to enable it.  Thanks
gloyola1Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

John-Charles-HerzbergCommented:
This will help;

This free SSL / TLS web server testing tool conducts a thorough analysis of your SSL / TLS web server configuration and performance. Including protocols, encryption ciphers, known security weaknesses, session caching and much more.

https://www.wormly.com/test_ssl
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
GaryCommented:
wormly.com said my site was using SSLv3 when it isn't

You can use this site to test for the Poodle vulnerability (which is why Salesforce are disabling SSLv3)
https://www.poodlescan.com/
0
GaryCommented:
You can also go here for how to disable it
http://www.experts-exchange.com/Q_28539415.html
0
What were the top attacks of Q1 2018?

The Threat Lab team analyzes data from WatchGuard’s Firebox Feed, internal and partner threat intelligence, and a research honeynet, to provide insightful analysis about the top threats on the Internet. Check out our Q1 2018 report for smart, practical security advice today!

gloyola1Author Commented:
I have access to the web server, how can I find out if SSL or TLS is enabled.  If TLS is not enabled how can I enable it.  Thanks
0
GaryCommented:
It would be very unusual if TLS wasn't enabled - it's the most widely used form of encryption for SSL and has been for 15 years.
SSLv3 is very rarely used.

What server?
0
gloyola1Author Commented:
2008 r2 web server
0
GaryCommented:
Disabling is detailed in the link above.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
SSL / HTTPS

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.