How to tell what SSL/TLS protocols allowed from my client application?
<p>I have a client application communicating with external party application. The client application is up and running for long time. </p>

<p>Recently, I received a request from the third party asking about the allowed SSL/TLS protocols from the application server where my client application is running and calling their application.</p>

<p><strong>Questions</strong></p>

<p>How to tell what SSL/TLS protocols allowed from my client application ?</p>

<p><strong>What has been done so far</strong></p>

<p><strong>1 -</strong> I checked SSL configration at the server's browser where my client application is running, See below screen shot. Is this what the third party team trying to know?</p>

<p><a href="https://i.stack.imgur.com/PP4CL.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/PP4CL.png" alt="SSL_Setting_On_Browse"></a></p>

<p><strong>2 -</strong> The client application is running from weblogic 10.3.6. I cheked weblogic configuration in the following but I could not find any thing about the SSL/TLS protoclos used:</p>

<p><strong>2.1 -</strong> Summary of Servers >Server_1 >Protocols</p>

<p><strong>2.2 -</strong> Summary of Servers >Server_1 >Configuration >SSL</p>

<p><strong>------ Update ------</strong></p>

<p>I am using Java 7 for the client application. For that I checked the <a href="http://docs.oracle.com/javase/7/docs/technotes/guides/security/jsse/JSSERefGuide.html#SupportClasses" rel="nofollow noreferrer">Java™ Secure Socket Extension (JSSE)</a> documentation online. In the online documentation I found the following </p>

<blockquote>
  <p><strong>Engine Class Implemented</strong> : SSLContext</p>
  
  <p><strong>Algorithm or Protocol:</strong> SSLv3 (a.k.a. SSL), TLSv1 (a.k.a. TLS), TLSv1.1, TLSv1.2</p>
</blockquote>

<p>See documentation <a href="http://docs.oracle.com/javase/7/docs/technotes/guides/security/SunProviders.html#SunJSSEProvider" rel="nofollow noreferrer">Java Cryptography Architecture Oracle Providers Documentation for Java Platform Standard Edition 7, The SunJSSE Provider</a> for more information.</p>

<p>So is this the allowed SSL/TLS protocols from my client application? Further if Java has its own allowed Protocols, then how is that related to protocols setting in the browser ( Point 1 above )?</p>