You can check your configuration afterwards using this tool: https://www.ssllabs.com/ssltest/
For command line, this his nice: https://github.com/iSECPartners/sslyze
For command line, this his nice: https://github.com/iSECPartners/sslyze
It especially useful in locked-up environments where the server-to-server communication must be TLS, yet both servers are not directly accessible from the 'public' internet.