Can someone please explain SSL/TLS belongs to which OSI layer. I have been looking through many sites and all of them have different options of Application, Presentation and Session.
Layer 1 is responsible for transferring bits across a wire -- SSL/TLS does not fit in this category.
Layer 2 is responsible for hop-to-hop delivery -- SSL/TLS does not fit into this category.
Layer 3 is responsible for end-to-end delivery -- SSL/TLS does not fit into this category.
Layer 4 is responsible for service-to-service delivery -- SSL/TLS does not fit into this category.
Which leaves the ambiguous trifecta of the application -- SSL/TLS is an application layer protocol (L5-L7).
Each application (FTP, TFTP, DNS, HTTP, Telnet, etc...) does L5-L7 differently -- so trying to distinguish between what exactly happens at L5 vs L6 vs L7 is less productive. Hence, often, Network Engineers simply refer to L5+ as the application and we leave it at that.
I think SSL is an interesting one which is not exactly obvious, judging from your own research. The most specific answer here (think certification exam) is available from recommendation X-200 from the ITU-T
By looking at the behaviors of SSL, we have encryption/decryption and also an exchange of traffic between two endpoints for compatibility and key calculation.
Layer 6 is for encryption/decryption, and Layer 5 includes managing a communication session in the form of back and forth transmissions between two nodes. The protocol using SSL would be something like HTTP which sits in Application layer, it is the thing SSL is encrypting/decrypting data for
Therefore, SSL is both layer 5 and 6 (but not 7).
Edit1 for more better words.