SSL/TLS兼容性

Yahoo Slurp Jan 2015

发布时间:

2015-01

支持协议

TLS 1.3 不支持
TLS 1.2 支持
TLS 1.1 支持
TLS 1.0 支持
SSL 3 支持
SSL 2 不支持

支持的加密套件

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384  (0xC030)   FS  

256

TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384  (0xC02C)   FS  

256

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384  (0xC028)   FS  

256

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384  (0xC024)   FS  

256

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA  (0xC014)   FS  

256

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA  (0xC00A)   FS  

256

TLS_DHE_DSS_WITH_AES_256_GCM_SHA384  (0xA3)   FS  

256

TLS_DHE_RSA_WITH_AES_256_GCM_SHA384  (0x9F)   FS  

256

TLS_DHE_RSA_WITH_AES_256_CBC_SHA256  (0x6B)   FS  

256

TLS_DHE_DSS_WITH_AES_256_CBC_SHA256  (0x6A)   FS  

256

TLS_DHE_RSA_WITH_AES_256_CBC_SHA  (0x39)   FS  

256

TLS_DHE_DSS_WITH_AES_256_CBC_SHA  (0x38)   FS  

256

TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA  (0x88)   FS  

256

TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA  (0x87)   FS  

256

TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384  (0xC032)    

256

TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384  (0xC02E)    

256

TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384  (0xC02A)    

256

TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384  (0xC026)    

256

TLS_ECDH_RSA_WITH_AES_256_CBC_SHA  (0xC00F)    

256

TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA  (0xC005)    

256

TLS_RSA_WITH_AES_256_GCM_SHA384  (0x9D)    

256

TLS_RSA_WITH_AES_256_CBC_SHA256  (0x3D)    

256

TLS_RSA_WITH_AES_256_CBC_SHA  (0x35)    

256

TLS_RSA_WITH_CAMELLIA_256_CBC_SHA  (0x84)    

256

TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA  (0xC012)    WEAK

112

TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA  (0xC008)    WEAK

112

TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA  (0x16)    WEAK

112

TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA  (0x13)    WEAK

112

TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA  (0xC00D)    WEAK

112

TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA  (0xC003)    WEAK

112

TLS_RSA_WITH_3DES_EDE_CBC_SHA  (0xA)    WEAK

112

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256  (0xC02F)   FS  

128

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256  (0xC02B)   FS  

128

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256  (0xC027)   FS  

128

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256  (0xC023)   FS  

128

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA  (0xC013)   FS  

128

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA  (0xC009)   FS  

128

TLS_DHE_DSS_WITH_AES_128_GCM_SHA256  (0xA2)   FS  

128

TLS_DHE_RSA_WITH_AES_128_GCM_SHA256  (0x9E)   FS  

128

TLS_DHE_RSA_WITH_AES_128_CBC_SHA256  (0x67)   FS  

128

TLS_DHE_DSS_WITH_AES_128_CBC_SHA256  (0x40)   FS  

128

TLS_DHE_RSA_WITH_AES_128_CBC_SHA  (0x33)   FS  

128

TLS_DHE_DSS_WITH_AES_128_CBC_SHA  (0x32)   FS  

128

TLS_DHE_RSA_WITH_SEED_CBC_SHA  (0x9A)   FS  

128

TLS_DHE_DSS_WITH_SEED_CBC_SHA  (0x99)   FS  

128

TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA  (0x45)   FS  

128

TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA  (0x44)   FS  

128

TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256  (0xC031)    

128

TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256  (0xC02D)    

128

TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256  (0xC029)    

128

TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256  (0xC025)    

128

TLS_ECDH_RSA_WITH_AES_128_CBC_SHA  (0xC00E)    

128

TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA  (0xC004)    

128

TLS_RSA_WITH_AES_128_GCM_SHA256  (0x9C)    

128

TLS_RSA_WITH_AES_128_CBC_SHA256  (0x3C)    

128

TLS_RSA_WITH_AES_128_CBC_SHA  (0x2F)    

128

TLS_RSA_WITH_SEED_CBC_SHA  (0x96)    

128

TLS_RSA_WITH_CAMELLIA_128_CBC_SHA  (0x41)    

128

TLS_RSA_WITH_IDEA_CBC_SHA  (0x7)    

128

TLS_ECDHE_RSA_WITH_RC4_128_SHA  (0xC011)    INSECURE

128

TLS_ECDHE_ECDSA_WITH_RC4_128_SHA  (0xC007)    INSECURE

128

TLS_ECDH_RSA_WITH_RC4_128_SHA  (0xC00C)    INSECURE

128

TLS_ECDH_ECDSA_WITH_RC4_128_SHA  (0xC002)    

128

TLS_RSA_WITH_RC4_128_SHA  (0x5)    INSECURE

128

TLS_RSA_WITH_RC4_128_MD5  (0x4)    INSECURE

128

TLS_DHE_RSA_WITH_DES_CBC_SHA  (0x15)    INSECURE

56

TLS_DHE_DSS_WITH_DES_CBC_SHA  (0x12)    INSECURE

56

TLS_RSA_WITH_DES_CBC_SHA  (0x9)    INSECURE

56

TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA  (0x14)    INSECURE

40

TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA  (0x11)    INSECURE

40

TLS_RSA_EXPORT_WITH_DES40_CBC_SHA  (0x8)    INSECURE

40

TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5  (0x6)    INSECURE

40

TLS_RSA_EXPORT_WITH_RC4_40_MD5  (0x3)    INSECURE

40

TLS_EMPTY_RENEGOTIATION_INFO_SCSV  (0xFF)    

0

协议扩展

SNI 支持
安全的客户端重协商(MITM) 支持
TLS压缩 不支持
会话恢复(Ticket) 支持
OCSP装订 不支持
签名算法 SHA512/RSA SHA512/DSA SHA512/ECDSA SHA384/RSA SHA384/DSA SHA384/ECDSA SHA256/RSA SHA256/DSA SHA256/ECDSA SHA224/RSA SHA224/DSA SHA224/ECDSA SHA1/RSA SHA1/DSA SHA1/ECDSA MD5/RSA
椭圆曲线 secp384r1 secp256r1
NPN 不支持
ALPN 不支持
SSL23兼容 不支持

混合套件

混合协议扩展