SSL/TLS兼容性
支持协议
| TLS 1.3 | 不支持 |
| TLS 1.2 | 支持 |
| TLS 1.1 | 支持 |
| TLS 1.0 | 支持 |
| SSL 3 | 支持 |
| SSL 2 | 不支持 |
支持的加密套件
|
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xC030) FS |
256 |
|
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (0xC02C) FS |
256 |
|
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xC014) FS |
256 |
|
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (0xC00A) FS |
256 |
|
TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 (0xA3) FS |
256 |
|
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (0x9F) FS |
256 |
|
TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 (0x6B) FS |
256 |
|
TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 (0x6A) FS |
256 |
|
TLS_DHE_RSA_WITH_AES_256_CBC_SHA (0x39) FS |
256 |
|
TLS_DHE_DSS_WITH_AES_256_CBC_SHA (0x38) FS |
256 |
|
TLS_RSA_WITH_AES_256_GCM_SHA384 (0x9D) |
256 |
|
TLS_RSA_WITH_AES_256_CBC_SHA256 (0x3D) |
256 |
|
TLS_RSA_WITH_AES_256_CBC_SHA (0x35) |
256 |
|
TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA (0xC012) WEAK |
112 |
|
TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA (0xC008) WEAK |
112 |
|
TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA (0x16) WEAK |
112 |
|
TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA (0x13) WEAK |
112 |
|
TLS_RSA_WITH_3DES_EDE_CBC_SHA (0xA) WEAK |
112 |
|
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xC02F) FS |
128 |
|
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (0xC02B) FS |
128 |
|
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (0xC027) FS |
128 |
|
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 (0xC023) FS |
128 |
|
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xC013) FS |
128 |
|
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (0xC009) FS |
128 |
|
TLS_DHE_DSS_WITH_AES_128_GCM_SHA256 (0xA2) FS |
128 |
|
TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (0x9E) FS |
128 |
|
TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 (0x67) FS |
128 |
|
TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 (0x40) FS |
128 |
|
TLS_DHE_RSA_WITH_AES_128_CBC_SHA (0x33) FS |
128 |
|
TLS_DHE_DSS_WITH_AES_128_CBC_SHA (0x32) FS |
128 |
|
TLS_RSA_WITH_AES_128_GCM_SHA256 (0x9C) |
128 |
|
TLS_RSA_WITH_AES_128_CBC_SHA256 (0x3C) |
128 |
|
TLS_RSA_WITH_AES_128_CBC_SHA (0x2F) |
128 |
|
TLS_ECDHE_RSA_WITH_RC4_128_SHA (0xC011) INSECURE |
128 |
|
TLS_ECDHE_ECDSA_WITH_RC4_128_SHA (0xC007) INSECURE |
128 |
|
TLS_RSA_WITH_RC4_128_SHA (0x5) INSECURE |
128 |
|
TLS_RSA_WITH_RC4_128_MD5 (0x4) INSECURE |
128 |
|
TLS_EMPTY_RENEGOTIATION_INFO_SCSV (0xFF) |
0 |
协议扩展
| SNI | 支持 |
| 安全的客户端重协商(MITM) | 支持 |
| TLS压缩 | 不支持 |
| 会话恢复(Ticket) | 支持 |
| OCSP装订 | 不支持 |
| 签名算法 | SHA512/RSA SHA512/DSA SHA512/ECDSA SHA384/RSA SHA384/DSA SHA384/ECDSA SHA256/RSA SHA256/DSA SHA256/ECDSA SHA224/RSA SHA224/DSA SHA224/ECDSA SHA1/RSA SHA1/DSA SHA1/ECDSA MD5/RSA |
| 椭圆曲线 | secp521r1 secp384r1 secp256r1 |
| NPN | 支持 |
| ALPN | 不支持 |
| SSL23兼容 | 不支持 |