Chef: How to check whether TLS 1.0 and 1.1 versions and any of their related dependencies are still in use on Linux servers? - Progress Community

Loading

Skip to Main Content

Chef: How to check whether TLS 1.0 and 1.1 versions and any of their related dependencies are still in use on Linux servers?

This article describes about impacts and validation on the use of TLS 1.0 and 1.1 versions since Progress has officially retired support for Transport Layer Security (TLS) 1.0 and 1.1

Feb 20, 2026
Knowledge

Title

Chef: How to check whether TLS 1.0 and 1.1 versions and any of their related dependencies are still in use on Linux servers?

URL Name

How-to-check-whether-TLS-1-0-and-1-1-versions-and-any-of-their-related-dependencies-are-still-in-use-on-Linux-servers

Article Number

000289885

Environment

Question/Problem Description

Could you please assist or guide us in checking whether these versions and any of their related dependencies are still in use on our servers?

How to validate if my server is using old TLS version?

Steps to Reproduce

Clarifying Information

Error Message

Defect Number

Enhancement Number

Cause

Resolution

As part of ongoing security improvements, TLS 1.0 and TLS 1.1 were officially deprecated in 2021, as they are no longer considered secure by modern standards. These protocol versions are outdated and vulnerable to known exploits.

TLS (Transport Layer Security) is the protocol that secures communications over the web. To ensure data confidentiality and integrity, it is essential to use supported versions - TLS 1.2 or higher.

Progress - as part of ongoing efforts to enhance security and align with modern encryption standards, we have retired support for Transport Layer Security (TLS) versions 1.0 and 1.1 across our infrastructure. This change is in accordance with industry best practices and guidelines.

This means that any system still using these older security protocols will no longer be able to establish a connection to our infrastructure.

We have listed some of the most common questions along with their answers.

How do I check if my application/toolset is still communicating over TLS 1.0 or 1.1?
- Use a network traffic analyzer like Wireshark to inspect the SSL handshake. Apply the following filters:
  - TLS 1.0: ssl.handshake.version==0x0301
  - TLS 1.1: ssl.handshake.version==0x0302
  - TLS 1.2: ssl.handshake.version==0x0303
  - TLS 1.3: ssl.handshake.version==0x0304

My application uses OpenSSL. How can I check supported TLS versions and test connectivity?
To check supported protocols:
- In order to validate the SSL using openssl To test specific versions: Run: openssl s_client args and look for -tls* flags
  - TLS 1.0: openssl s_client -connect <domain>:443 -tls1
  - TLS 1.1: openssl s_client -connect <domain>:443 -tls1_1
  - TLS 1.2: openssl s_client -connect <domain>:443 -tls1_2
  - TLS 1.3: openssl s_client -connect <domain>:443 -tls1_3

Are there any workarounds if my environment isn’t ready yet?
1. - If using OpenSSL, upgrade to at least version 1.0.1 (TLS 1.2 support)
  - If your app handles handshakes manually, upgrade to the latest version supported by your OS and verify with logs or Wireshark
  - If curl fits your automation needs, verify if its version 7.19 or newer. Example test commands:
    TLS 1.0: curl -v --tls-max 1.0 --url "https://<url>""
    TLS 1.1: curl -v --tls-max 1.1 --url "https://<url>""
    TLS 1.2: curl -v --tls-max 1.2 --url "https://<url>""
    TLS 1.3: curl -v --tls-max 1.3 --url "https://<url>""
  - Alternatively, download packages on a modern machine and share with older systems via file share or internal repository.

I’m already seeing errors. Could they be due to the TLS change?
1. - Check application logs for **SSL connect/handshake errors
  - Use Wireshark or similar tools to capture traffic and confirm handshake failures.

What is the error code for TLS failure?
1. - error:0A0000BF:SSL routines:tls_setup_handshake:no protocols available
  - The handshake failed because TLS 1.0 is not supported by the server (or by your OpenSSL version). You're forcing TLS 1.0 via -tls1, but the server rejects it.

What will be the message on successful connection?
1. - When the TLS connection is successful, the result will be as below sample. (Redacted certificate details)
  - CONNECTED(00000003)
  - *** Details about certificate ***
  - ---
    Certificate chain
  - ----
  - SSL handshake has read 5902 bytes and written 320 bytes
    Verification: OK
    ---
    New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384
    Server public key is 4096 bit
    Secure Renegotiation IS supported
    Compression: NONE
    Expansion: NONE
    No ALPN negotiated
    SSL-Session:
    Protocol : TLSv1.2

References -

Blog - https://www.chef.io/blog/saying-goodbye-to-tls-1.0-and-1.1-guide-to-what-comes-next

Workaround

Notes

Keyword Phrase

Last Modified Date

2/20/2026 1:29 PM

Drop Files

Upload FilesOr drop files

Disclaimer

The origins of the information on this site may be internal or external to Progress Software Corporation (“Progress”). Progress Software Corporation makes all reasonable efforts to verify this information. However, the information provided is for your information only. Progress Software Corporation makes no explicit or implied claims to the validity of this information.

Any sample code provided on this site is not supported under any Progress support program or service. The sample code is provided on an "AS IS" basis. Progress makes no warranties, express or implied, and disclaims all implied warranties including, without limitation, the implied warranties of merchantability or of fitness for a particular purpose. The entire risk arising out of the use or performance of the sample code is borne by the user. In no event shall Progress, its employees, or anyone else involved in the creation, production, or delivery of the code be liable for any damages whatsoever (including, without limitation, damages for loss of business profits, business interruption, loss of business information, or other pecuniary loss) arising out of the use of or inability to use the sample code, even if Progress has been advised of the possibility of such damages.

Loading

Chef: How to check whether TLS 1.0 and 1.1 versions and any of their related dependencies are still in use on Linux servers? - Progress Community