The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
This module describes the commands used to configure the Secure Socket Layer (SSL) protocol.
For detailed information about SSL concepts, configuration tasks, and examples, see the Implementing Secure Socket Layer on the Cisco IOS XR Software module in the Cisco IOS XR System Security Configuration Guide for the Cisco CRS Router.
To display active Secure Socket Layer (SSL) sessions, use the show ssl command.
show ssl [process-id]
|
process-id |
(Optional) Process ID (PID) of the SSL application. The range is from 1 to 1000000000. |
None
EXEC
|
Release |
Modification |
|---|---|
|
Release 2.0 |
This command was introduced. |
To display a specific process, enter the process ID number. To get a specific process ID number, enter run pidin from the command line or from a shell.
The absence of any argument produces a display that shows all processes that are running SSL.
|
Task ID |
Operations |
|---|---|
|
crypto |
read |
The following sample output is from the show ssl command:
RP/0/RP0/CPU0:router# show ssl
PID Method Type Peer Port Cipher-Suite
============================================================================
1261711 sslv3 Server 172.16.0.5 1296 DES-CBC3-SHA
This table describes the fields shown in the display.
|
Field |
Description |
|---|---|
|
PID |
Process ID of the SSL application. |
|
Method |
Protocol version (sslv2, sslv3, sslv23, or tlsv1). |
|
Type |
SSL client or server. |
|
Peer |
IP address of the SSL peer. |
|
Port |
Port number on which the SSL traffic is sent. |
|
Cipher-Suite |
Exact cipher suite chosen for the SSL traffic. The first portion indicates the encryption, the second portion the hash or integrity method. In the sample display, the encryption is Triple DES and the Integrity (message digest algorithm) is SHA. |
|
Command |
Description |
|---|---|
|
run pidin |
Displays the process ID for all processes that are running. |
Feedback