SSL/TLS兼容性
支持协议
| TLS 1.3 | 不支持 |
| TLS 1.2 | 支持 |
| TLS 1.1 | 支持 |
| TLS 1.0 | 支持 |
| SSL 3 | 不支持 |
| SSL 2 | 不支持 |
支持的加密套件
|
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (0xC02C) FS |
256 |
|
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (0xC02B) FS |
128 |
|
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xC030) FS |
256 |
|
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xC02F) FS |
128 |
|
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (0x9F) FS |
256 |
|
TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (0x9E) FS |
128 |
|
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 (0xC024) FS |
256 |
|
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 (0xC023) FS |
128 |
|
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (0xC028) FS |
256 |
|
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (0xC027) FS |
128 |
|
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (0xC00A) FS |
256 |
|
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (0xC009) FS |
128 |
|
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xC014) FS |
256 |
|
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xC013) FS |
128 |
|
TLS_DHE_RSA_WITH_AES_256_CBC_SHA (0x39) FS |
256 |
|
TLS_DHE_RSA_WITH_AES_128_CBC_SHA (0x33) FS |
128 |
|
TLS_RSA_WITH_AES_256_GCM_SHA384 (0x9D) |
256 |
|
TLS_RSA_WITH_AES_128_GCM_SHA256 (0x9C) |
128 |
|
TLS_RSA_WITH_AES_256_CBC_SHA256 (0x3D) |
256 |
|
TLS_RSA_WITH_AES_128_CBC_SHA256 (0x3C) |
128 |
|
TLS_RSA_WITH_AES_256_CBC_SHA (0x35) |
256 |
|
TLS_RSA_WITH_AES_128_CBC_SHA (0x2F) |
128 |
|
TLS_RSA_WITH_3DES_EDE_CBC_SHA (0xA) WEAK |
112 |
|
TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 (0x6A) FS |
256 |
|
TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 (0x40) FS |
128 |
|
TLS_DHE_DSS_WITH_AES_256_CBC_SHA (0x38) FS |
256 |
|
TLS_DHE_DSS_WITH_AES_128_CBC_SHA (0x32) FS |
128 |
|
TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA (0x13) WEAK |
112 |
协议扩展
| SNI | 支持 |
| 安全的客户端重协商(MITM) | 支持 |
| TLS压缩 | 不支持 |
| 会话恢复(Ticket) | 支持 |
| OCSP装订 | 支持 |
| 签名算法 | SHA256/RSA SHA384/RSA SHA1/RSA SHA256/ECDSA SHA384/ECDSA SHA1/ECDSA SHA1/DSA SHA512/RSA SHA512/ECDSA |
| 椭圆曲线 | secp256r1 secp384r1 |
| NPN | 不支持 |
| ALPN | 不支持 |
| SSL23兼容 | 不支持 |