SSL/TLS兼容性
支持协议
| TLS 1.3 | 不支持 |
| TLS 1.2 | 支持 |
| TLS 1.1 | 支持 |
| TLS 1.0 | 支持 |
| SSL 3 | 不支持 |
| SSL 2 | 不支持 |
支持的加密套件
|
TLS_EMPTY_RENEGOTIATION_INFO_SCSV (0xFF) |
0 |
|
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (0xC02C) FS |
256 |
|
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (0xC02B) FS |
128 |
|
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 (0xC024) FS |
256 |
|
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 (0xC023) FS |
128 |
|
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (0xC00A) FS |
256 |
|
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (0xC009) FS |
128 |
|
TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA (0xC008) WEAK |
112 |
|
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xC030) FS |
256 |
|
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xC02F) FS |
128 |
|
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (0xC028) FS |
256 |
|
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (0xC027) FS |
128 |
|
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xC014) FS |
256 |
|
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xC013) FS |
128 |
|
TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA (0xC012) WEAK |
112 |
|
TLS_RSA_WITH_AES_256_GCM_SHA384 (0x9D) |
256 |
|
TLS_RSA_WITH_AES_128_GCM_SHA256 (0x9C) |
128 |
|
TLS_RSA_WITH_AES_256_CBC_SHA256 (0x3D) |
256 |
|
TLS_RSA_WITH_AES_128_CBC_SHA256 (0x3C) |
128 |
|
TLS_RSA_WITH_AES_256_CBC_SHA (0x35) |
256 |
|
TLS_RSA_WITH_AES_128_CBC_SHA (0x2F) |
128 |
|
TLS_RSA_WITH_3DES_EDE_CBC_SHA (0xA) WEAK |
112 |
协议扩展
| SNI | 支持 |
| 安全的客户端重协商(MITM) | 支持 |
| TLS压缩 | 不支持 |
| 会话恢复(Ticket) | 不支持 |
| OCSP装订 | 支持 |
| 签名算法 | SHA256/RSA SHA1/RSA SHA384/RSA SHA512/RSA SHA256/ECDSA SHA1/ECDSA SHA384/ECDSA SHA512/ECDSA |
| 椭圆曲线 | secp256r1 secp384r1 secp521r1 |
| NPN | 支持 |
| ALPN | h2 h2-16 h2-15 h2-14 spdy/3.1 spdy/3 http/1.1 |
| SSL23兼容 | 不支持 |