SSL/TLS兼容性

OpenSSL 1.0.1l

发布时间:

2015-01

支持协议

TLS 1.3 不支持
TLS 1.2 支持
TLS 1.1 支持
TLS 1.0 支持
SSL 3 支持
SSL 2 不支持

支持的加密套件

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384  (0xC030)   FS  

256

TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384  (0xC02C)   FS  

256

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384  (0xC028)   FS  

256

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384  (0xC024)   FS  

256

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA  (0xC014)   FS  

256

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA  (0xC00A)   FS  

256

TLS_DHE_DSS_WITH_AES_256_GCM_SHA384  (0xA3)   FS  

256

TLS_DHE_RSA_WITH_AES_256_GCM_SHA384  (0x9F)   FS  

256

TLS_DHE_RSA_WITH_AES_256_CBC_SHA256  (0x6B)   FS  

256

TLS_DHE_DSS_WITH_AES_256_CBC_SHA256  (0x6A)   FS  

256

TLS_DHE_RSA_WITH_AES_256_CBC_SHA  (0x39)   FS  

256

TLS_DHE_DSS_WITH_AES_256_CBC_SHA  (0x38)   FS  

256

TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA  (0x88)   FS  

256

TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA  (0x87)   FS  

256

TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384  (0xC032)    

256

TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384  (0xC02E)    

256

TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384  (0xC02A)    

256

TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384  (0xC026)    

256

TLS_ECDH_RSA_WITH_AES_256_CBC_SHA  (0xC00F)    

256

TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA  (0xC005)    

256

TLS_RSA_WITH_AES_256_GCM_SHA384  (0x9D)    

256

TLS_RSA_WITH_AES_256_CBC_SHA256  (0x3D)    

256

TLS_RSA_WITH_AES_256_CBC_SHA  (0x35)    

256

TLS_RSA_WITH_CAMELLIA_256_CBC_SHA  (0x84)    

256

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256  (0xC02F)   FS  

128

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256  (0xC02B)   FS  

128

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256  (0xC027)   FS  

128

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256  (0xC023)   FS  

128

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA  (0xC013)   FS  

128

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA  (0xC009)   FS  

128

TLS_DHE_DSS_WITH_AES_128_GCM_SHA256  (0xA2)   FS  

128

TLS_DHE_RSA_WITH_AES_128_GCM_SHA256  (0x9E)   FS  

128

TLS_DHE_RSA_WITH_AES_128_CBC_SHA256  (0x67)   FS  

128

TLS_DHE_DSS_WITH_AES_128_CBC_SHA256  (0x40)   FS  

128

TLS_DHE_RSA_WITH_AES_128_CBC_SHA  (0x33)   FS  

128

TLS_DHE_DSS_WITH_AES_128_CBC_SHA  (0x32)   FS  

128

TLS_DHE_RSA_WITH_SEED_CBC_SHA  (0x9A)   FS  

128

TLS_DHE_DSS_WITH_SEED_CBC_SHA  (0x99)   FS  

128

TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA  (0x45)   FS  

128

TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA  (0x44)   FS  

128

TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256  (0xC031)    

128

TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256  (0xC02D)    

128

TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256  (0xC029)    

128

TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256  (0xC025)    

128

TLS_ECDH_RSA_WITH_AES_128_CBC_SHA  (0xC00E)    

128

TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA  (0xC004)    

128

TLS_RSA_WITH_AES_128_GCM_SHA256  (0x9C)    

128

TLS_RSA_WITH_AES_128_CBC_SHA256  (0x3C)    

128

TLS_RSA_WITH_AES_128_CBC_SHA  (0x2F)    

128

TLS_RSA_WITH_SEED_CBC_SHA  (0x96)    

128

TLS_RSA_WITH_CAMELLIA_128_CBC_SHA  (0x41)    

128

TLS_RSA_WITH_IDEA_CBC_SHA  (0x7)    

128

TLS_ECDHE_RSA_WITH_RC4_128_SHA  (0xC011)    INSECURE

128

TLS_ECDHE_ECDSA_WITH_RC4_128_SHA  (0xC007)    INSECURE

128

TLS_ECDH_RSA_WITH_RC4_128_SHA  (0xC00C)    INSECURE

128

TLS_ECDH_ECDSA_WITH_RC4_128_SHA  (0xC002)    

128

TLS_RSA_WITH_RC4_128_SHA  (0x5)    INSECURE

128

TLS_RSA_WITH_RC4_128_MD5  (0x4)    INSECURE

128

TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA  (0xC012)    WEAK

112

TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA  (0xC008)    WEAK

112

TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA  (0x16)    WEAK

112

TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA  (0x13)    WEAK

112

TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA  (0xC00D)    WEAK

112

TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA  (0xC003)    WEAK

112

TLS_RSA_WITH_3DES_EDE_CBC_SHA  (0xA)    WEAK

112

TLS_DHE_RSA_WITH_DES_CBC_SHA  (0x15)    INSECURE

56

TLS_DHE_DSS_WITH_DES_CBC_SHA  (0x12)    INSECURE

56

TLS_RSA_WITH_DES_CBC_SHA  (0x9)    INSECURE

56

TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA  (0x14)    INSECURE

40

TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA  (0x11)    INSECURE

40

TLS_RSA_EXPORT_WITH_DES40_CBC_SHA  (0x8)    INSECURE

40

TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5  (0x6)    INSECURE

40

TLS_RSA_EXPORT_WITH_RC4_40_MD5  (0x3)    INSECURE

40

TLS_EMPTY_RENEGOTIATION_INFO_SCSV  (0xFF)    

0

协议扩展

SNI 支持
安全的客户端重协商(MITM) 支持
TLS压缩 不支持
会话恢复(Ticket) 支持
OCSP装订 支持
签名算法 SHA512/RSA SHA512/DSA SHA512/ECDSA SHA384/RSA SHA384/DSA SHA384/ECDSA SHA256/RSA SHA256/DSA SHA256/ECDSA SHA224/RSA SHA224/DSA SHA224/ECDSA SHA1/RSA SHA1/DSA SHA1/ECDSA
椭圆曲线 sect571r1 sect571k1 secp521r1 sect409k1 sect409r1 secp384r1 sect283k1 sect283r1 secp256k1 secp256r1 sect239k1 sect233k1 sect233r1 secp224k1 secp224r1 sect193r1 sect193r2 secp192k1 secp192r1 sect163k1 sect163r1 sect163r2 secp160k1 secp160r1 secp160r2
NPN 不支持
ALPN 不支持
SSL23兼容 不支持

混合套件

混合协议扩展