TLS Cipher Suites in Windows

TLS Cipher Suites in Windows

 

Cipher suite is a concept used in Transport Layer Security (TLS) / Secure Sockets Layer (SSL) network protocol. Its a named combination of authentication, encryption, message authentication code (MAC) and key exchange algorithms used to negotiate the security settings.

 

When a TLS connection is established, a handshaking, known as the TLS Handshake Protocol, occurs. Within this handshake, a client hello (ClientHello) and a server hello (ServerHello) message are passed.[4] First, the client sends a list of the cipher suites that it supports, in order of preference. Then the server replies with the cipher suite that it has selected from the client's list.

 

To know what are the cipher supported by server and client , we can use the below site

 

For Client

https://www.ssllabs.com/ssltest/viewMyClient.html

 

For Server

https://www.ssllabs.com/ssltest/index.html

 

Additional detail regarding support of cipher on windows can be forum @  https://msdn.microsoft.com/en-us/library/windows/desktop/mt767768(v=vs.85).aspx

How to list certificate installed on my PC using PowerShell.

Use the below code to get the list of certificate installed .

This code gets the children of “Cert:\LocalMachine\my ” , adds the same to an array

$certificates = @{}
Get-ChildItem Cert:\LocalMachine\my | % {
        $cert = $_
        $_.DnsNameList | % {
   
            [string] $dnsName = $_
            $certificates[$dnsName] = $cert.Thumbprint
        }
    }
 $certificates