b60a61fa94
1. fixed the AES-CCM-16 suites 2. added DHE-PSK as a key-exchange algorithm type 3. Added infrastructure for new suites: * TLS_DHE_PSK_WITH_AES_128_GCM_SHA256 * TLS_DHE_PSK_WITH_AES_256_GCM_SHA384 * TLS_DHE_PSK_WITH_AES_128_CBC_SHA256 * TLS_DHE_PSK_WITH_AES_256_CBC_SHA384 * TLS_DHE_PSK_WITH_NULL_SHA256 * TLS_DHE_PSK_WITH_NULL_SHA384 * TLS_DHE_PSK_WITH_AES_128_CCM * TLS_DHE_PSK_WITH_AES_256_CCM 4. added test cases for new suites 5. set DHE parameters on test server when using PSK and a custom cipher suite list 6. updated half premaster key size
1925 lines
29 KiB
Plaintext
1925 lines
29 KiB
Plaintext
# server SSLv3 RC4-SHA
|
|
-v 0
|
|
-l RC4-SHA
|
|
|
|
# client SSLv3 RC4-SHA
|
|
-v 0
|
|
-l RC4-SHA
|
|
|
|
# server SSLv3 RC4-MD5
|
|
-v 0
|
|
-l RC4-MD5
|
|
|
|
# client SSLv3 RC4-MD5
|
|
-v 0
|
|
-l RC4-MD5
|
|
|
|
# server SSLv3 DES-CBC3-SHA
|
|
-v 0
|
|
-l DES-CBC3-SHA
|
|
|
|
# client SSLv3 DES-CBC3-SHA
|
|
-v 0
|
|
-l DES-CBC3-SHA
|
|
|
|
# server TLSv1 RC4-SHA
|
|
-v 1
|
|
-l RC4-SHA
|
|
|
|
# client TLSv1 RC4-SHA
|
|
-v 1
|
|
-l RC4-SHA
|
|
|
|
# server TLSv1 RC4-MD5
|
|
-v 1
|
|
-l RC4-MD5
|
|
|
|
# client TLSv1 RC4-MD5
|
|
-v 1
|
|
-l RC4-MD5
|
|
|
|
# server TLSv1 DES-CBC3-SHA
|
|
-v 1
|
|
-l DES-CBC3-SHA
|
|
|
|
# client TLSv1 DES-CBC3-SHA
|
|
-v 1
|
|
-l DES-CBC3-SHA
|
|
|
|
# server TLSv1 AES128-SHA
|
|
-v 1
|
|
-l AES128-SHA
|
|
|
|
# client TLSv1 AES128-SHA
|
|
-v 1
|
|
-l AES128-SHA
|
|
|
|
# server TLSv1 AES256-SHA
|
|
-v 1
|
|
-l AES256-SHA
|
|
|
|
# client TLSv1 AES256-SHA
|
|
-v 1
|
|
-l AES256-SHA
|
|
|
|
# server TLSv1 AES128-SHA256
|
|
-v 1
|
|
-l AES128-SHA256
|
|
|
|
# client TLSv1 AES128-SHA256
|
|
-v 1
|
|
-l AES128-SHA256
|
|
|
|
# server TLSv1 AES256-SHA256
|
|
-v 1
|
|
-l AES256-SHA256
|
|
|
|
# client TLSv1 AES256-SHA256
|
|
-v 1
|
|
-l AES256-SHA256
|
|
|
|
# server TLSv1.1 RC4-SHA
|
|
-v 2
|
|
-l RC4-SHA
|
|
|
|
# client TLSv1.1 RC4-SHA
|
|
-v 2
|
|
-l RC4-SHA
|
|
|
|
# server TLSv1.1 RC4-MD5
|
|
-v 2
|
|
-l RC4-MD5
|
|
|
|
# client TLSv1.1 RC4-MD5
|
|
-v 2
|
|
-l RC4-MD5
|
|
|
|
# server TLSv1.1 DES-CBC3-SHA
|
|
-v 2
|
|
-l DES-CBC3-SHA
|
|
|
|
# client TLSv1.1 DES-CBC3-SHA
|
|
-v 2
|
|
-l DES-CBC3-SHA
|
|
|
|
# server TLSv1.1 AES128-SHA
|
|
-v 2
|
|
-l AES128-SHA
|
|
|
|
# client TLSv1.1 AES128-SHA
|
|
-v 2
|
|
-l AES128-SHA
|
|
|
|
# server TLSv1.1 AES256-SHA
|
|
-v 2
|
|
-l AES256-SHA
|
|
|
|
# client TLSv1.1 AES256-SHA
|
|
-v 2
|
|
-l AES256-SHA
|
|
|
|
# server TLSv1.1 AES128-SHA256
|
|
-v 2
|
|
-l AES128-SHA256
|
|
|
|
# client TLSv1.1 AES128-SHA256
|
|
-v 2
|
|
-l AES128-SHA256
|
|
|
|
# server TLSv1.1 AES256-SHA256
|
|
-v 2
|
|
-l AES256-SHA256
|
|
|
|
# client TLSv1.1 AES256-SHA256
|
|
-v 2
|
|
-l AES256-SHA256
|
|
|
|
# server TLSv1.2 RC4-SHA
|
|
-v 3
|
|
-l RC4-SHA
|
|
|
|
# client TLSv1.2 RC4-SHA
|
|
-v 3
|
|
-l RC4-SHA
|
|
|
|
# server TLSv1.2 RC4-MD5
|
|
-v 3
|
|
-l RC4-MD5
|
|
|
|
# client TLSv1.2 RC4-MD5
|
|
-v 3
|
|
-l RC4-MD5
|
|
|
|
# server TLSv1.2 DES-CBC3-SHA
|
|
-v 3
|
|
-l DES-CBC3-SHA
|
|
|
|
# client TLSv1.2 DES-CBC3-SHA
|
|
-v 3
|
|
-l DES-CBC3-SHA
|
|
|
|
# server TLSv1.2 AES128-SHA
|
|
-v 3
|
|
-l AES128-SHA
|
|
|
|
# client TLSv1.2 AES128-SHA
|
|
-v 3
|
|
-l AES128-SHA
|
|
|
|
# server TLSv1.2 AES256-SHA
|
|
-v 3
|
|
-l AES256-SHA
|
|
|
|
# client TLSv1.2 AES256-SHA
|
|
-v 3
|
|
-l AES256-SHA
|
|
|
|
# server TLSv1.2 AES128-SHA256
|
|
-v 3
|
|
-l AES128-SHA256
|
|
|
|
# client TLSv1.2 AES128-SHA256
|
|
-v 3
|
|
-l AES128-SHA256
|
|
|
|
# server TLSv1.2 AES256-SHA256
|
|
-v 3
|
|
-l AES256-SHA256
|
|
|
|
# client TLSv1.2 AES256-SHA256
|
|
-v 3
|
|
-l AES256-SHA256
|
|
|
|
# server TLSv1 ECDHE-RSA-RC4
|
|
-v 1
|
|
-l ECDHE-RSA-RC4-SHA
|
|
|
|
# client TLSv1 ECDHE-RSA-RC4
|
|
-v 1
|
|
-l ECDHE-RSA-RC4-SHA
|
|
|
|
# server TLSv1 ECDHE-RSA-DES3
|
|
-v 1
|
|
-l ECDHE-RSA-DES-CBC3-SHA
|
|
|
|
# client TLSv1 ECDHE-RSA-DES3
|
|
-v 1
|
|
-l ECDHE-RSA-DES-CBC3-SHA
|
|
|
|
# server TLSv1 ECDHE-RSA-AES128
|
|
-v 1
|
|
-l ECDHE-RSA-AES128-SHA
|
|
|
|
# client TLSv1 ECDHE-RSA-AES128
|
|
-v 1
|
|
-l ECDHE-RSA-AES128-SHA
|
|
|
|
# server TLSv1 ECDHE-RSA-AES256
|
|
-v 1
|
|
-l ECDHE-RSA-AES256-SHA
|
|
|
|
# client TLSv1 ECDHE-RSA-AES256
|
|
-v 1
|
|
-l ECDHE-RSA-AES256-SHA
|
|
|
|
# server TLSv1.1 ECDHE-RSA-RC4
|
|
-v 2
|
|
-l ECDHE-RSA-RC4-SHA
|
|
|
|
# client TLSv1.1 ECDHE-RSA-RC4
|
|
-v 2
|
|
-l ECDHE-RSA-RC4-SHA
|
|
|
|
# server TLSv1.1 ECDHE-RSA-DES3
|
|
-v 2
|
|
-l ECDHE-RSA-DES-CBC3-SHA
|
|
|
|
# client TLSv1.1 ECDHE-RSA-DES3
|
|
-v 2
|
|
-l ECDHE-RSA-DES-CBC3-SHA
|
|
|
|
# server TLSv1.1 ECDHE-RSA-AES128
|
|
-v 2
|
|
-l ECDHE-RSA-AES128-SHA
|
|
|
|
# client TLSv1.1 ECDHE-RSA-AES128
|
|
-v 2
|
|
-l ECDHE-RSA-AES128-SHA
|
|
|
|
# server TLSv1.1 ECDHE-RSA-AES256
|
|
-v 2
|
|
-l ECDHE-RSA-AES256-SHA
|
|
|
|
# client TLSv1.1 ECDHE-RSA-AES256
|
|
-v 2
|
|
-l ECDHE-RSA-AES256-SHA
|
|
|
|
# server TLSv1.2 ECDHE-RSA-RC4
|
|
-v 3
|
|
-l ECDHE-RSA-RC4-SHA
|
|
|
|
# client TLSv1.2 ECDHE-RSA-RC4
|
|
-v 3
|
|
-l ECDHE-RSA-RC4-SHA
|
|
|
|
# server TLSv1.2 ECDHE-RSA-DES3
|
|
-v 3
|
|
-l ECDHE-RSA-DES-CBC3-SHA
|
|
|
|
# client TLSv1.2 ECDHE-RSA-DES3
|
|
-v 3
|
|
-l ECDHE-RSA-DES-CBC3-SHA
|
|
|
|
# server TLSv1.2 ECDHE-RSA-AES128
|
|
-v 3
|
|
-l ECDHE-RSA-AES128-SHA
|
|
|
|
# client TLSv1.2 ECDHE-RSA-AES128
|
|
-v 3
|
|
-l ECDHE-RSA-AES128-SHA
|
|
|
|
# server TLSv1.2 ECDHE-RSA-AES128-SHA256
|
|
-v 3
|
|
-l ECDHE-RSA-AES128-SHA256
|
|
|
|
# client TLSv1.2 ECDHE-RSA-AES128-SHA256
|
|
-v 3
|
|
-l ECDHE-RSA-AES128-SHA256
|
|
|
|
# server TLSv1.2 ECDHE-RSA-AES256
|
|
-v 3
|
|
-l ECDHE-RSA-AES256-SHA
|
|
|
|
# client TLSv1.2 ECDHE-RSA-AES256
|
|
-v 3
|
|
-l ECDHE-RSA-AES256-SHA
|
|
|
|
# server TLSv1 ECDHE-ECDSA-RC4
|
|
-v 1
|
|
-l ECDHE-ECDSA-RC4-SHA
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1 ECDHE-ECDSA-RC4
|
|
-v 1
|
|
-l ECDHE-ECDSA-RC4-SHA
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1 ECDHE-ECDSA-DES3
|
|
-v 1
|
|
-l ECDHE-ECDSA-DES-CBC3-SHA
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1 ECDHE-ECDSA-DES3
|
|
-v 1
|
|
-l ECDHE-ECDSA-DES-CBC3-SHA
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1 ECDHE-ECDSA-AES128
|
|
-v 1
|
|
-l ECDHE-ECDSA-AES128-SHA
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1 ECDHE-ECDSA-AES128
|
|
-v 1
|
|
-l ECDHE-ECDSA-AES128-SHA
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1 ECDHE-ECDSA-AES256
|
|
-v 1
|
|
-l ECDHE-ECDSA-AES256-SHA
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1 ECDHE-ECDSA-AES256
|
|
-v 1
|
|
-l ECDHE-ECDSA-AES256-SHA
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1.1 ECDHE-EDCSA-RC4
|
|
-v 2
|
|
-l ECDHE-ECDSA-RC4-SHA
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.1 ECDHE-ECDSA-RC4
|
|
-v 2
|
|
-l ECDHE-ECDSA-RC4-SHA
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1.1 ECDHE-ECDSA-DES3
|
|
-v 2
|
|
-l ECDHE-ECDSA-DES-CBC3-SHA
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.1 ECDHE-ECDSA-DES3
|
|
-v 2
|
|
-l ECDHE-ECDSA-DES-CBC3-SHA
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1.1 ECDHE-ECDSA-AES128
|
|
-v 2
|
|
-l ECDHE-ECDSA-AES128-SHA
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.1 ECDHE-ECDSA-AES128
|
|
-v 2
|
|
-l ECDHE-ECDSA-AES128-SHA
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1.1 ECDHE-ECDSA-AES256
|
|
-v 2
|
|
-l ECDHE-ECDSA-AES256-SHA
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.1 ECDHE-ECDSA-AES256
|
|
-v 2
|
|
-l ECDHE-ECDSA-AES256-SHA
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1.2 ECDHE-ECDSA-RC4
|
|
-v 3
|
|
-l ECDHE-ECDSA-RC4-SHA
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.2 ECDHE-ECDSA-RC4
|
|
-v 3
|
|
-l ECDHE-ECDSA-RC4-SHA
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1.2 ECDHE-ECDSA-DES3
|
|
-v 3
|
|
-l ECDHE-ECDSA-DES-CBC3-SHA
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.2 ECDHE-ECDSA-DES3
|
|
-v 3
|
|
-l ECDHE-ECDSA-DES-CBC3-SHA
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1.2 ECDHE-ECDSA-AES128
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES128-SHA
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.2 ECDHE-ECDSA-AES128
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES128-SHA
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1.2 ECDHE-ECDSA-AES128-SHA256
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES128-SHA256
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.2 ECDHE-ECDSA-AES128-SHA256
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES128-SHA256
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1.2 ECDHE-ECDSA-AES256
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES256-SHA
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.2 ECDHE-ECDSA-AES256
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES256-SHA
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1 ECDH-RSA-RC4
|
|
-v 1
|
|
-l ECDH-RSA-RC4-SHA
|
|
-c ./certs/server-ecc-rsa.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1 ECDH-RSA-RC4
|
|
-v 1
|
|
-l ECDH-RSA-RC4-SHA
|
|
|
|
# server TLSv1 ECDH-RSA-DES3
|
|
-v 1
|
|
-l ECDH-RSA-DES-CBC3-SHA
|
|
-c ./certs/server-ecc-rsa.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1 ECDH-RSA-DES3
|
|
-v 1
|
|
-l ECDH-RSA-DES-CBC3-SHA
|
|
|
|
# server TLSv1 ECDH-RSA-AES128
|
|
-v 1
|
|
-l ECDH-RSA-AES128-SHA
|
|
-c ./certs/server-ecc-rsa.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1 ECDH-RSA-AES128
|
|
-v 1
|
|
-l ECDH-RSA-AES128-SHA
|
|
|
|
# server TLSv1 ECDH-RSA-AES256
|
|
-v 1
|
|
-l ECDH-RSA-AES256-SHA
|
|
-c ./certs/server-ecc-rsa.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1 ECDH-RSA-AES256
|
|
-v 1
|
|
-l ECDH-RSA-AES256-SHA
|
|
|
|
# server TLSv1.1 ECDH-RSA-RC4
|
|
-v 2
|
|
-l ECDH-RSA-RC4-SHA
|
|
-c ./certs/server-ecc-rsa.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.1 ECDH-RSA-RC4
|
|
-v 2
|
|
-l ECDH-RSA-RC4-SHA
|
|
|
|
# server TLSv1.1 ECDH-RSA-DES3
|
|
-v 2
|
|
-l ECDH-RSA-DES-CBC3-SHA
|
|
-c ./certs/server-ecc-rsa.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.1 ECDH-RSA-DES3
|
|
-v 2
|
|
-l ECDH-RSA-DES-CBC3-SHA
|
|
|
|
# server TLSv1.1 ECDH-RSA-AES128
|
|
-v 2
|
|
-l ECDH-RSA-AES128-SHA
|
|
-c ./certs/server-ecc-rsa.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.1 ECDH-RSA-AES128
|
|
-v 2
|
|
-l ECDH-RSA-AES128-SHA
|
|
|
|
# server TLSv1.1 ECDH-RSA-AES256
|
|
-v 2
|
|
-l ECDH-RSA-AES256-SHA
|
|
-c ./certs/server-ecc-rsa.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.1 ECDH-RSA-AES256
|
|
-v 2
|
|
-l ECDH-RSA-AES256-SHA
|
|
|
|
# server TLSv1.2 ECDH-RSA-RC4
|
|
-v 3
|
|
-l ECDH-RSA-RC4-SHA
|
|
-c ./certs/server-ecc-rsa.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.2 ECDH-RSA-RC4
|
|
-v 3
|
|
-l ECDH-RSA-RC4-SHA
|
|
|
|
# server TLSv1.2 ECDH-RSA-DES3
|
|
-v 3
|
|
-l ECDH-RSA-DES-CBC3-SHA
|
|
-c ./certs/server-ecc-rsa.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.2 ECDH-RSA-DES3
|
|
-v 3
|
|
-l ECDH-RSA-DES-CBC3-SHA
|
|
|
|
# server TLSv1.2 ECDH-RSA-AES128
|
|
-v 3
|
|
-l ECDH-RSA-AES128-SHA
|
|
-c ./certs/server-ecc-rsa.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.2 ECDH-RSA-AES128
|
|
-v 3
|
|
-l ECDH-RSA-AES128-SHA
|
|
|
|
# server TLSv1.2 ECDH-RSA-AES128-SHA256
|
|
-v 3
|
|
-l ECDH-RSA-AES128-SHA256
|
|
-c ./certs/server-ecc-rsa.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.2 ECDH-RSA-AES128-SHA256
|
|
-v 3
|
|
-l ECDH-RSA-AES128-SHA256
|
|
|
|
# server TLSv1.2 ECDH-RSA-AES256
|
|
-v 3
|
|
-l ECDH-RSA-AES256-SHA
|
|
-c ./certs/server-ecc-rsa.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.2 ECDH-RSA-AES256
|
|
-v 3
|
|
-l ECDH-RSA-AES256-SHA
|
|
|
|
# server TLSv1 ECDH-ECDSA-RC4
|
|
-v 1
|
|
-l ECDH-ECDSA-RC4-SHA
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1 ECDH-ECDSA-RC4
|
|
-v 1
|
|
-l ECDH-ECDSA-RC4-SHA
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1 ECDH-ECDSA-DES3
|
|
-v 1
|
|
-l ECDH-ECDSA-DES-CBC3-SHA
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1 ECDH-ECDSA-DES3
|
|
-v 1
|
|
-l ECDH-ECDSA-DES-CBC3-SHA
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1 ECDH-ECDSA-AES128
|
|
-v 1
|
|
-l ECDH-ECDSA-AES128-SHA
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1 ECDH-ECDSA-AES128
|
|
-v 1
|
|
-l ECDH-ECDSA-AES128-SHA
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1 ECDH-ECDSA-AES256
|
|
-v 1
|
|
-l ECDH-ECDSA-AES256-SHA
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1 ECDH-ECDSA-AES256
|
|
-v 1
|
|
-l ECDH-ECDSA-AES256-SHA
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1.1 ECDH-EDCSA-RC4
|
|
-v 2
|
|
-l ECDH-ECDSA-RC4-SHA
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.1 ECDH-ECDSA-RC4
|
|
-v 2
|
|
-l ECDH-ECDSA-RC4-SHA
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1.1 ECDH-ECDSA-DES3
|
|
-v 2
|
|
-l ECDH-ECDSA-DES-CBC3-SHA
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.1 ECDH-ECDSA-DES3
|
|
-v 2
|
|
-l ECDH-ECDSA-DES-CBC3-SHA
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1.1 ECDH-ECDSA-AES128
|
|
-v 2
|
|
-l ECDH-ECDSA-AES128-SHA
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.1 ECDH-ECDSA-AES128
|
|
-v 2
|
|
-l ECDH-ECDSA-AES128-SHA
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1.1 ECDH-ECDSA-AES256
|
|
-v 2
|
|
-l ECDH-ECDSA-AES256-SHA
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.1 ECDH-ECDSA-AES256
|
|
-v 2
|
|
-l ECDH-ECDSA-AES256-SHA
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1.2 ECDHE-ECDSA-RC4
|
|
-v 3
|
|
-l ECDH-ECDSA-RC4-SHA
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.2 ECDH-ECDSA-RC4
|
|
-v 3
|
|
-l ECDH-ECDSA-RC4-SHA
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1.2 ECDH-ECDSA-DES3
|
|
-v 3
|
|
-l ECDH-ECDSA-DES-CBC3-SHA
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.2 ECDH-ECDSA-DES3
|
|
-v 3
|
|
-l ECDH-ECDSA-DES-CBC3-SHA
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1.2 ECDH-ECDSA-AES128
|
|
-v 3
|
|
-l ECDH-ECDSA-AES128-SHA
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.2 ECDH-ECDSA-AES128
|
|
-v 3
|
|
-l ECDH-ECDSA-AES128-SHA
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1.2 ECDH-ECDSA-AES128-SHA256
|
|
-v 3
|
|
-l ECDH-ECDSA-AES128-SHA256
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.2 ECDH-ECDSA-AES128-SHA256
|
|
-v 3
|
|
-l ECDH-ECDSA-AES128-SHA256
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1.2 ECDH-ECDSA-AES256
|
|
-v 3
|
|
-l ECDH-ECDSA-AES256-SHA
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.2 ECDH-ECDSA-AES256
|
|
-v 3
|
|
-l ECDH-ECDSA-AES256-SHA
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1.2 ECDHE-RSA-AES256-SHA384
|
|
-v 3
|
|
-l ECDHE-RSA-AES256-SHA384
|
|
|
|
# client TLSv1.2 ECDHE-RSA-AES256-SHA384
|
|
-v 3
|
|
-l ECDHE-RSA-AES256-SHA384
|
|
|
|
# server TLSv1.2 ECDHE-ECDSA-AES256-SHA384
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES256-SHA384
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.2 ECDHE-ECDSA-AES256-SHA384
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES256-SHA384
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1.2 ECDH-RSA-AES256-SHA384
|
|
-v 3
|
|
-l ECDH-RSA-AES256-SHA384
|
|
-c ./certs/server-ecc-rsa.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.2 ECDH-RSA-AES256-SHA384
|
|
-v 3
|
|
-l ECDH-RSA-AES256-SHA384
|
|
|
|
# server TLSv1.2 ECDH-ECDSA-AES256-SHA384
|
|
-v 3
|
|
-l ECDH-ECDSA-AES256-SHA384
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.2 ECDH-ECDSA-AES256-SHA384
|
|
-v 3
|
|
-l ECDH-ECDSA-AES256-SHA384
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1 HC128-SHA
|
|
-v 1
|
|
-l HC128-SHA
|
|
|
|
# client TLSv1 HC128-SHA
|
|
-v 1
|
|
-l HC128-SHA
|
|
|
|
# server TLSv1 HC128-MD5
|
|
-v 1
|
|
-l HC128-MD5
|
|
|
|
# client TLSv1 HC128-MD5
|
|
-v 1
|
|
-l HC128-MD5
|
|
|
|
# server TLSv1 HC128-B2B256
|
|
-v 1
|
|
-l HC128-B2B256
|
|
|
|
# client TLSv1 HC128-B2B256
|
|
-v 1
|
|
-l HC128-B2B256
|
|
|
|
# server TLSv1 AES128-B2B256
|
|
-v 1
|
|
-l AES128-B2B256
|
|
|
|
# client TLSv1 AES128-B2B256
|
|
-v 1
|
|
-l AES128-B2B256
|
|
|
|
# server TLSv1 AES256-B2B256
|
|
-v 1
|
|
-l AES256-B2B256
|
|
|
|
# client TLSv1 AES256-B2B256
|
|
-v 1
|
|
-l AES256-B2B256
|
|
|
|
# server TLSv1.1 HC128-SHA
|
|
-v 2
|
|
-l HC128-SHA
|
|
|
|
# client TLSv1.1 HC128-SHA
|
|
-v 2
|
|
-l HC128-SHA
|
|
|
|
# server TLSv1.1 HC128-MD5
|
|
-v 2
|
|
-l HC128-MD5
|
|
|
|
# client TLSv1.1 HC128-MD5
|
|
-v 2
|
|
-l HC128-MD5
|
|
|
|
# server TLSv1.1 HC128-B2B256
|
|
-v 2
|
|
-l HC128-B2B256
|
|
|
|
# client TLSv1.1 HC128-B2B256
|
|
-v 2
|
|
-l HC128-B2B256
|
|
|
|
# server TLSv1.1 AES128-B2B256
|
|
-v 2
|
|
-l AES128-B2B256
|
|
|
|
# client TLSv1.1 AES128-B2B256
|
|
-v 2
|
|
-l AES128-B2B256
|
|
|
|
# server TLSv1.1 AES256-B2B256
|
|
-v 2
|
|
-l AES256-B2B256
|
|
|
|
# client TLSv1.1 AES256-B2B256
|
|
-v 2
|
|
-l AES256-B2B256
|
|
|
|
# server TLSv1.2 HC128-SHA
|
|
-v 3
|
|
-l HC128-SHA
|
|
|
|
# client TLSv1.2 HC128-SHA
|
|
-v 3
|
|
-l HC128-SHA
|
|
|
|
# server TLSv1.2 HC128-MD5
|
|
-v 3
|
|
-l HC128-MD5
|
|
|
|
# client TLSv1.2 HC128-MD5
|
|
-v 3
|
|
-l HC128-MD5
|
|
|
|
# server TLSv1.2 HC128-B2B256
|
|
-v 3
|
|
-l HC128-B2B256
|
|
|
|
# client TLSv1.2 HC128-B2B256
|
|
-v 3
|
|
-l HC128-B2B256
|
|
|
|
# server TLSv1.2 AES128-B2B256
|
|
-v 3
|
|
-l AES128-B2B256
|
|
|
|
# client TLSv1.2 AES128-B2B256
|
|
-v 3
|
|
-l AES128-B2B256
|
|
|
|
# server TLSv1.2 AES256-B2B256
|
|
-v 3
|
|
-l AES256-B2B256
|
|
|
|
# client TLSv1.2 AES256-B2B256
|
|
-v 3
|
|
-l AES256-B2B256
|
|
|
|
# server TLSv1 RABBIT-SHA
|
|
-v 1
|
|
-l RABBIT-SHA
|
|
|
|
# client TLSv1 RABBIT-SHA
|
|
-v 1
|
|
-l RABBIT-SHA
|
|
|
|
# server TLSv1.1 RABBIT-SHA
|
|
-v 2
|
|
-l RABBIT-SHA
|
|
|
|
# client TLSv1.1 RABBIT-SHA
|
|
-v 2
|
|
-l RABBIT-SHA
|
|
|
|
# server TLSv1.2 RABBIT-SHA
|
|
-v 3
|
|
-l RABBIT-SHA
|
|
|
|
# client TLSv1.2 RABBIT-SHA
|
|
-v 3
|
|
-l RABBIT-SHA
|
|
|
|
# server TLSv1 NTRU_RC4
|
|
-v 1
|
|
-l NTRU-RC4-SHA
|
|
-n
|
|
-c ./certs/ntru-cert.pem
|
|
-k ./certs/ntru-key.raw
|
|
|
|
# client TLSv1 NTRU_RC4
|
|
-v 1
|
|
-l NTRU-RC4-SHA
|
|
|
|
# server TLSv1 NTRU_DES3
|
|
-v 1
|
|
-l NTRU-DES-CBC3-SHA
|
|
-n
|
|
-c ./certs/ntru-cert.pem
|
|
-k ./certs/ntru-key.raw
|
|
|
|
# client TLSv1 NTRU_DES3
|
|
-v 1
|
|
-l NTRU-DES-CBC3-SHA
|
|
|
|
# server TLSv1 NTRU_AES128
|
|
-v 1
|
|
-l NTRU-AES128-SHA
|
|
-n
|
|
-c ./certs/ntru-cert.pem
|
|
-k ./certs/ntru-key.raw
|
|
|
|
# client TLSv1 NTRU_AES128
|
|
-v 1
|
|
-l NTRU-AES128-SHA
|
|
|
|
# server TLSv1 NTRU_AES256
|
|
-v 1
|
|
-l NTRU-AES256-SHA
|
|
-n
|
|
-c ./certs/ntru-cert.pem
|
|
-k ./certs/ntru-key.raw
|
|
|
|
# client TLSv1 NTRU_AES256
|
|
-v 1
|
|
-l NTRU-AES256-SHA
|
|
|
|
# server TLSv1.1 NTRU_RC4
|
|
-v 2
|
|
-l NTRU-RC4-SHA
|
|
-n
|
|
-c ./certs/ntru-cert.pem
|
|
-k ./certs/ntru-key.raw
|
|
|
|
# client TLSv1.1 NTRU_RC4
|
|
-v 2
|
|
-l NTRU-RC4-SHA
|
|
|
|
# server TLSv1.1 NTRU_DES3
|
|
-v 2
|
|
-l NTRU-DES-CBC3-SHA
|
|
-n
|
|
-c ./certs/ntru-cert.pem
|
|
-k ./certs/ntru-key.raw
|
|
|
|
# client TLSv1.1 NTRU_DES3
|
|
-v 2
|
|
-l NTRU-DES-CBC3-SHA
|
|
|
|
# server TLSv1.1 NTRU_AES128
|
|
-v 2
|
|
-l NTRU-AES128-SHA
|
|
-n
|
|
-c ./certs/ntru-cert.pem
|
|
-k ./certs/ntru-key.raw
|
|
|
|
# client TLSv1.1 NTRU_AES128
|
|
-v 2
|
|
-l NTRU-AES128-SHA
|
|
|
|
# server TLSv1.1 NTRU_AES256
|
|
-v 2
|
|
-l NTRU-AES256-SHA
|
|
-n
|
|
-c ./certs/ntru-cert.pem
|
|
-k ./certs/ntru-key.raw
|
|
|
|
# client TLSv1.1 NTRU_AES256
|
|
-v 2
|
|
-l NTRU-AES256-SHA
|
|
|
|
# server TLSv1.2 NTRU_RC4
|
|
-v 3
|
|
-l NTRU-RC4-SHA
|
|
-n
|
|
-c ./certs/ntru-cert.pem
|
|
-k ./certs/ntru-key.raw
|
|
|
|
# client TLSv1.2 NTRU_RC4
|
|
-v 3
|
|
-l NTRU-RC4-SHA
|
|
|
|
# server TLSv1.2 NTRU_DES3
|
|
-v 3
|
|
-l NTRU-DES-CBC3-SHA
|
|
-n
|
|
-c ./certs/ntru-cert.pem
|
|
-k ./certs/ntru-key.raw
|
|
|
|
# client TLSv1.2 NTRU_DES3
|
|
-v 3
|
|
-l NTRU-DES-CBC3-SHA
|
|
|
|
# server TLSv1.2 NTRU_AES128
|
|
-v 3
|
|
-l NTRU-AES128-SHA
|
|
-n
|
|
-c ./certs/ntru-cert.pem
|
|
-k ./certs/ntru-key.raw
|
|
|
|
# client TLSv1.2 NTRU_AES128
|
|
-v 3
|
|
-l NTRU-AES128-SHA
|
|
|
|
# server TLSv1.2 NTRU_AES256
|
|
-v 3
|
|
-l NTRU-AES256-SHA
|
|
-n
|
|
-c ./certs/ntru-cert.pem
|
|
-k ./certs/ntru-key.raw
|
|
|
|
# client TLSv1.2 NTRU_AES256
|
|
-v 3
|
|
-l NTRU-AES256-SHA
|
|
|
|
# server TLSv1 DHE AES128
|
|
-v 1
|
|
-l DHE-RSA-AES128-SHA
|
|
|
|
# client TLSv1 DHE AES128
|
|
-v 1
|
|
-l DHE-RSA-AES128-SHA
|
|
|
|
# server TLSv1 DHE AES256
|
|
-v 1
|
|
-l DHE-RSA-AES256-SHA
|
|
|
|
# client TLSv1 DHE AES256
|
|
-v 1
|
|
-l DHE-RSA-AES256-SHA
|
|
|
|
# server TLSv1 DHE AES128-SHA256
|
|
-v 1
|
|
-l DHE-RSA-AES128-SHA256
|
|
|
|
# client TLSv1 DHE AES128-SHA256
|
|
-v 1
|
|
-l DHE-RSA-AES128-SHA256
|
|
|
|
# server TLSv1 DHE AES256-SHA256
|
|
-v 1
|
|
-l DHE-RSA-AES256-SHA256
|
|
|
|
# client TLSv1 DHE AES256-SHA256
|
|
-v 1
|
|
-l DHE-RSA-AES256-SHA256
|
|
|
|
# server TLSv1.1 DHE AES128
|
|
-v 2
|
|
-l DHE-RSA-AES128-SHA
|
|
|
|
# client TLSv1.1 DHE AES128
|
|
-v 2
|
|
-l DHE-RSA-AES128-SHA
|
|
|
|
# server TLSv1.1 DHE AES256
|
|
-v 2
|
|
-l DHE-RSA-AES256-SHA
|
|
|
|
# client TLSv1.1 DHE AES256
|
|
-v 2
|
|
-l DHE-RSA-AES256-SHA
|
|
|
|
# server TLSv1.1 DHE AES128-SHA256
|
|
-v 2
|
|
-l DHE-RSA-AES128-SHA256
|
|
|
|
# client TLSv1.1 DHE AES128-SHA256
|
|
-v 2
|
|
-l DHE-RSA-AES128-SHA256
|
|
|
|
# server TLSv1.1 DHE AES256-SHA256
|
|
-v 2
|
|
-l DHE-RSA-AES256-SHA256
|
|
|
|
# client TLSv1.1 DHE AES256-SHA256
|
|
-v 2
|
|
-l DHE-RSA-AES256-SHA256
|
|
|
|
# server TLSv1.2 DHE AES128
|
|
-v 3
|
|
-l DHE-RSA-AES128-SHA
|
|
|
|
# client TLSv1.2 DHE AES128
|
|
-v 3
|
|
-l DHE-RSA-AES128-SHA
|
|
|
|
# server TLSv1.2 DHE AES256
|
|
-v 3
|
|
-l DHE-RSA-AES256-SHA
|
|
|
|
# client TLSv1.2 DHE AES256
|
|
-v 3
|
|
-l DHE-RSA-AES256-SHA
|
|
|
|
# server TLSv1.2 DHE AES128-SHA256
|
|
-v 3
|
|
-l DHE-RSA-AES128-SHA256
|
|
|
|
# client TLSv1.2 DHE AES128-SHA256
|
|
-v 3
|
|
-l DHE-RSA-AES128-SHA256
|
|
|
|
# server TLSv1.2 DHE AES256-SHA256
|
|
-v 3
|
|
-l DHE-RSA-AES256-SHA256
|
|
|
|
# client TLSv1.2 DHE AES256-SHA256
|
|
-v 3
|
|
-l DHE-RSA-AES256-SHA256
|
|
|
|
# server TLSv1 PSK-AES128
|
|
-s
|
|
-v 1
|
|
-l PSK-AES128-CBC-SHA
|
|
|
|
# client TLSv1 PSK-AES128
|
|
-s
|
|
-v 1
|
|
-l PSK-AES128-CBC-SHA
|
|
|
|
# server TLSv1 PSK-AES256
|
|
-s
|
|
-v 1
|
|
-l PSK-AES256-CBC-SHA
|
|
|
|
# client TLSv1 PSK-AES256
|
|
-s
|
|
-v 1
|
|
-l PSK-AES256-CBC-SHA
|
|
|
|
# server TLSv1.1 PSK-AES128
|
|
-s
|
|
-v 2
|
|
-l PSK-AES128-CBC-SHA
|
|
|
|
# client TLSv1.1 PSK-AES128
|
|
-s
|
|
-v 2
|
|
-l PSK-AES128-CBC-SHA
|
|
|
|
# server TLSv1.1 PSK-AES256
|
|
-s
|
|
-v 2
|
|
-l PSK-AES256-CBC-SHA
|
|
|
|
# client TLSv1.1 PSK-AES256
|
|
-s
|
|
-v 2
|
|
-l PSK-AES256-CBC-SHA
|
|
|
|
# server TLSv1.2 PSK-AES128
|
|
-s
|
|
-v 3
|
|
-l PSK-AES128-CBC-SHA
|
|
|
|
# client TLSv1.2 PSK-AES128
|
|
-s
|
|
-v 3
|
|
-l PSK-AES128-CBC-SHA
|
|
|
|
# server TLSv1.2 PSK-AES256
|
|
-s
|
|
-v 3
|
|
-l PSK-AES256-CBC-SHA
|
|
|
|
# client TLSv1.2 PSK-AES256
|
|
-s
|
|
-v 3
|
|
-l PSK-AES256-CBC-SHA
|
|
|
|
# server TLSv1.0 PSK-AES128-SHA256
|
|
-s
|
|
-v 1
|
|
-l PSK-AES128-CBC-SHA256
|
|
|
|
# client TLSv1.0 PSK-AES128-SHA256
|
|
-s
|
|
-v 1
|
|
-l PSK-AES128-CBC-SHA256
|
|
|
|
# server TLSv1.1 PSK-AES128-SHA256
|
|
-s
|
|
-v 2
|
|
-l PSK-AES128-CBC-SHA256
|
|
|
|
# client TLSv1.1 PSK-AES128-SHA256
|
|
-s
|
|
-v 2
|
|
-l PSK-AES128-CBC-SHA256
|
|
|
|
# server TLSv1.2 PSK-AES128-SHA256
|
|
-s
|
|
-v 3
|
|
-l PSK-AES128-CBC-SHA256
|
|
|
|
# client TLSv1.2 PSK-AES128-SHA256
|
|
-s
|
|
-v 3
|
|
-l PSK-AES128-CBC-SHA256
|
|
|
|
# server TLSv1.0 PSK-AES256-SHA384
|
|
-s
|
|
-v 1
|
|
-l PSK-AES256-CBC-SHA384
|
|
|
|
# client TLSv1.0 PSK-AES256-SHA384
|
|
-s
|
|
-v 1
|
|
-l PSK-AES256-CBC-SHA384
|
|
|
|
# server TLSv1.1 PSK-AES256-SHA384
|
|
-s
|
|
-v 2
|
|
-l PSK-AES256-CBC-SHA384
|
|
|
|
# client TLSv1.1 PSK-AES256-SHA384
|
|
-s
|
|
-v 2
|
|
-l PSK-AES256-CBC-SHA384
|
|
|
|
# server TLSv1.2 PSK-AES256-SHA384
|
|
-s
|
|
-v 3
|
|
-l PSK-AES256-CBC-SHA384
|
|
|
|
# client TLSv1.2 PSK-AES256-SHA384
|
|
-s
|
|
-v 3
|
|
-l PSK-AES256-CBC-SHA384
|
|
|
|
# server TLSv1.0 PSK-NULL
|
|
-s
|
|
-v 1
|
|
-l PSK-NULL-SHA
|
|
|
|
# client TLSv1.0 PSK-NULL
|
|
-s
|
|
-v 1
|
|
-l PSK-NULL-SHA
|
|
|
|
# server TLSv1.1 PSK-NULL
|
|
-s
|
|
-v 2
|
|
-l PSK-NULL-SHA
|
|
|
|
# client TLSv1.1 PSK-NULL
|
|
-s
|
|
-v 2
|
|
-l PSK-NULL-SHA
|
|
|
|
# server TLSv1.2 PSK-NULL
|
|
-s
|
|
-v 3
|
|
-l PSK-NULL-SHA
|
|
|
|
# client TLSv1.2 PSK-NULL
|
|
-s
|
|
-v 3
|
|
-l PSK-NULL-SHA
|
|
|
|
# server TLSv1.2 PSK-NULL-SHA256
|
|
-s
|
|
-v 3
|
|
-l PSK-NULL-SHA256
|
|
|
|
# client TLSv1.2 PSK-NULL-SHA256
|
|
-s
|
|
-v 3
|
|
-l PSK-NULL-SHA256
|
|
|
|
# server TLSv1.2 PSK-NULL-SHA384
|
|
-s
|
|
-v 3
|
|
-l PSK-NULL-SHA384
|
|
|
|
# client TLSv1.2 PSK-NULL-SHA384
|
|
-s
|
|
-v 3
|
|
-l PSK-NULL-SHA384
|
|
|
|
# server TLSv1.2 PSK-NULL
|
|
-s
|
|
-v 3
|
|
-l PSK-NULL-SHA
|
|
|
|
# client TLSv1.2 PSK-NULL
|
|
-s
|
|
-v 3
|
|
-l PSK-NULL-SHA
|
|
|
|
# server TLSv1.2 PSK-NULL-SHA256
|
|
-s
|
|
-v 3
|
|
-l PSK-NULL-SHA256
|
|
|
|
# client TLSv1.2 PSK-NULL-SHA256
|
|
-s
|
|
-v 3
|
|
-l PSK-NULL-SHA256
|
|
|
|
# server TLSv1.0 RSA-NULL-SHA
|
|
-v 1
|
|
-l NULL-SHA
|
|
|
|
# client TLSv1.0 RSA-NULL-SHA
|
|
-v 1
|
|
-l NULL-SHA
|
|
|
|
# server TLSv1.1 RSA-NULL-SHA
|
|
-v 2
|
|
-l NULL-SHA
|
|
|
|
# client TLSv1.1 RSA-NULL-SHA
|
|
-v 2
|
|
-l NULL-SHA
|
|
|
|
# server TLSv1.2 RSA-NULL-SHA
|
|
-v 3
|
|
-l NULL-SHA
|
|
|
|
# client TLSv1.2 RSA-NULL-SHA
|
|
-v 3
|
|
-l NULL-SHA
|
|
|
|
# server TLSv1.0 RSA-NULL-SHA256
|
|
-v 1
|
|
-l NULL-SHA256
|
|
|
|
# client TLSv1.0 RSA-NULL-SHA256
|
|
-v 1
|
|
-l NULL-SHA256
|
|
|
|
# server TLSv1.1 RSA-NULL-SHA256
|
|
-v 2
|
|
-l NULL-SHA256
|
|
|
|
# client TLSv1.1 RSA-NULL-SHA256
|
|
-v 2
|
|
-l NULL-SHA256
|
|
|
|
# server TLSv1.2 RSA-NULL-SHA256
|
|
-v 3
|
|
-l NULL-SHA256
|
|
|
|
# client TLSv1.2 RSA-NULL-SHA256
|
|
-v 3
|
|
-l NULL-SHA256
|
|
|
|
# server TLSv1 CAMELLIA128-SHA
|
|
-v 1
|
|
-l CAMELLIA128-SHA
|
|
|
|
# client TLSv1 CAMELLIA128-SHA
|
|
-v 1
|
|
-l CAMELLIA128-SHA
|
|
|
|
# server TLSv1 CAMELLIA256-SHA
|
|
-v 1
|
|
-l CAMELLIA256-SHA
|
|
|
|
# client TLSv1 CAMELLIA256-SHA
|
|
-v 1
|
|
-l CAMELLIA256-SHA
|
|
|
|
# server TLSv1 CAMELLIA128-SHA256
|
|
-v 1
|
|
-l CAMELLIA128-SHA256
|
|
|
|
# client TLSv1 CAMELLIA128-SHA256
|
|
-v 1
|
|
-l CAMELLIA128-SHA256
|
|
|
|
# server TLSv1 CAMELLIA256-SHA256
|
|
-v 1
|
|
-l CAMELLIA256-SHA256
|
|
|
|
# client TLSv1 CAMELLIA256-SHA256
|
|
-v 1
|
|
-l CAMELLIA256-SHA256
|
|
|
|
# server TLSv1.1 CAMELLIA128-SHA
|
|
-v 2
|
|
-l CAMELLIA128-SHA
|
|
|
|
# client TLSv1.1 CAMELLIA128-SHA
|
|
-v 2
|
|
-l CAMELLIA128-SHA
|
|
|
|
# server TLSv1.1 CAMELLIA256-SHA
|
|
-v 2
|
|
-l CAMELLIA256-SHA
|
|
|
|
# client TLSv1.1 CAMELLIA256-SHA
|
|
-v 2
|
|
-l CAMELLIA256-SHA
|
|
|
|
# server TLSv1.1 CAMELLIA128-SHA256
|
|
-v 2
|
|
-l CAMELLIA128-SHA256
|
|
|
|
# client TLSv1.1 CAMELLIA128-SHA256
|
|
-v 2
|
|
-l CAMELLIA128-SHA256
|
|
|
|
# server TLSv1.1 CAMELLIA256-SHA256
|
|
-v 2
|
|
-l CAMELLIA256-SHA256
|
|
|
|
# client TLSv1.1 CAMELLIA256-SHA256
|
|
-v 2
|
|
-l CAMELLIA256-SHA256
|
|
|
|
# server TLSv1.2 CAMELLIA128-SHA
|
|
-v 3
|
|
-l CAMELLIA128-SHA
|
|
|
|
# client TLSv1.2 CAMELLIA128-SHA
|
|
-v 3
|
|
-l CAMELLIA128-SHA
|
|
|
|
# server TLSv1.2 CAMELLIA256-SHA
|
|
-v 3
|
|
-l CAMELLIA256-SHA
|
|
|
|
# client TLSv1.2 CAMELLIA256-SHA
|
|
-v 3
|
|
-l CAMELLIA256-SHA
|
|
|
|
# server TLSv1.2 CAMELLIA128-SHA256
|
|
-v 3
|
|
-l CAMELLIA128-SHA256
|
|
|
|
# client TLSv1.2 CAMELLIA128-SHA256
|
|
-v 3
|
|
-l CAMELLIA128-SHA256
|
|
|
|
# server TLSv1.2 CAMELLIA256-SHA256
|
|
-v 3
|
|
-l CAMELLIA256-SHA256
|
|
|
|
# client TLSv1.2 CAMELLIA256-SHA256
|
|
-v 3
|
|
-l CAMELLIA256-SHA256
|
|
|
|
# server TLSv1 DHE-RSA-CAMELLIA128-SHA
|
|
-v 1
|
|
-l DHE-RSA-CAMELLIA128-SHA
|
|
|
|
# client TLSv1 DHE-RSA-CAMELLIA128-SHA
|
|
-v 1
|
|
-l DHE-RSA-CAMELLIA128-SHA
|
|
|
|
# server TLSv1 DHE-RSA-CAMELLIA256-SHA
|
|
-v 1
|
|
-l DHE-RSA-CAMELLIA256-SHA
|
|
|
|
# client TLSv1 DHE-RSA-CAMELLIA256-SHA
|
|
-v 1
|
|
-l DHE-RSA-CAMELLIA256-SHA
|
|
|
|
# server TLSv1 DHE-RSA-CAMELLIA128-SHA256
|
|
-v 1
|
|
-l DHE-RSA-CAMELLIA128-SHA256
|
|
|
|
# client TLSv1 DHE-RSA-CAMELLIA128-SHA256
|
|
-v 1
|
|
-l DHE-RSA-CAMELLIA128-SHA256
|
|
|
|
# server TLSv1 DHE-RSA-CAMELLIA256-SHA256
|
|
-v 1
|
|
-l DHE-RSA-CAMELLIA256-SHA256
|
|
|
|
# client TLSv1 DHE-RSA-CAMELLIA256-SHA256
|
|
-v 1
|
|
-l DHE-RSA-CAMELLIA256-SHA256
|
|
|
|
# server TLSv1.1 DHE-RSA-CAMELLIA128-SHA
|
|
-v 2
|
|
-l DHE-RSA-CAMELLIA128-SHA
|
|
|
|
# client TLSv1.1 DHE-RSA-CAMELLIA128-SHA
|
|
-v 2
|
|
-l DHE-RSA-CAMELLIA128-SHA
|
|
|
|
# server TLSv1.1 DHE-RSA-CAMELLIA256-SHA
|
|
-v 2
|
|
-l DHE-RSA-CAMELLIA256-SHA
|
|
|
|
# client TLSv1.1 DHE-RSA-CAMELLIA256-SHA
|
|
-v 2
|
|
-l DHE-RSA-CAMELLIA256-SHA
|
|
|
|
# server TLSv1.1 DHE-RSA-CAMELLIA128-SHA256
|
|
-v 2
|
|
-l DHE-RSA-CAMELLIA128-SHA256
|
|
|
|
# client TLSv1.1 DHE-RSA-CAMELLIA128-SHA256
|
|
-v 2
|
|
-l DHE-RSA-CAMELLIA128-SHA256
|
|
|
|
# server TLSv1.1 DHE-RSA-CAMELLIA256-SHA256
|
|
-v 2
|
|
-l DHE-RSA-CAMELLIA256-SHA256
|
|
|
|
# client TLSv1.1 DHE-RSA-CAMELLIA256-SHA256
|
|
-v 2
|
|
-l DHE-RSA-CAMELLIA256-SHA256
|
|
|
|
# server TLSv1.2 DHE-RSA-CAMELLIA128-SHA
|
|
-v 3
|
|
-l DHE-RSA-CAMELLIA128-SHA
|
|
|
|
# client TLSv1.2 DHE-RSA-CAMELLIA128-SHA
|
|
-v 3
|
|
-l DHE-RSA-CAMELLIA128-SHA
|
|
|
|
# server TLSv1.2 DHE-RSA-CAMELLIA256-SHA
|
|
-v 3
|
|
-l DHE-RSA-CAMELLIA256-SHA
|
|
|
|
# client TLSv1.2 DHE-RSA-CAMELLIA256-SHA
|
|
-v 3
|
|
-l DHE-RSA-CAMELLIA256-SHA
|
|
|
|
# server TLSv1.2 DHE-RSA-CAMELLIA128-SHA256
|
|
-v 3
|
|
-l DHE-RSA-CAMELLIA128-SHA256
|
|
|
|
# client TLSv1.2 DHE-RSA-CAMELLIA128-SHA256
|
|
-v 3
|
|
-l DHE-RSA-CAMELLIA128-SHA256
|
|
|
|
# server TLSv1.2 DHE-RSA-CAMELLIA256-SHA256
|
|
-v 3
|
|
-l DHE-RSA-CAMELLIA256-SHA256
|
|
|
|
# client TLSv1.2 DHE-RSA-CAMELLIA256-SHA256
|
|
-v 3
|
|
-l DHE-RSA-CAMELLIA256-SHA256
|
|
|
|
# server TLSv1.2 RSA-AES128-GCM-SHA256
|
|
-v 3
|
|
-l AES128-GCM-SHA256
|
|
|
|
# client TLSv1.2 RSA-AES128-GCM-SHA256
|
|
-v 3
|
|
-l AES128-GCM-SHA256
|
|
|
|
# server TLSv1.2 RSA-AES256-GCM-SHA384
|
|
-v 3
|
|
-l AES256-GCM-SHA384
|
|
|
|
# client TLSv1.2 RSA-AES256-GCM-SHA384
|
|
-v 3
|
|
-l AES256-GCM-SHA384
|
|
|
|
# server TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES128-GCM-SHA256
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES128-GCM-SHA256
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES256-GCM-SHA384
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES256-GCM-SHA384
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1.2 ECDH-ECDSA-AES128-GCM-SHA256
|
|
-v 3
|
|
-l ECDH-ECDSA-AES128-GCM-SHA256
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.2 ECDH-ECDSA-AES128-GCM-SHA256
|
|
-v 3
|
|
-l ECDH-ECDSA-AES128-GCM-SHA256
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1.2 ECDH-ECDSA-AES256-GCM-SHA384
|
|
-v 3
|
|
-l ECDH-ECDSA-AES256-GCM-SHA384
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.2 ECDH-ECDSA-AES256-GCM-SHA384
|
|
-v 3
|
|
-l ECDH-ECDSA-AES256-GCM-SHA384
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
|
|
-v 3
|
|
-l ECDHE-RSA-AES128-GCM-SHA256
|
|
|
|
# client TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
|
|
-v 3
|
|
-l ECDHE-RSA-AES128-GCM-SHA256
|
|
|
|
# server TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
|
|
-v 3
|
|
-l ECDHE-RSA-AES256-GCM-SHA384
|
|
|
|
# client TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
|
|
-v 3
|
|
-l ECDHE-RSA-AES256-GCM-SHA384
|
|
|
|
# server TLSv1.2 ECDH-RSA-AES128-GCM-SHA256
|
|
-v 3
|
|
-l ECDH-RSA-AES128-GCM-SHA256
|
|
-c ./certs/server-ecc-rsa.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.2 ECDH-RSA-AES128-GCM-SHA256
|
|
-v 3
|
|
-l ECDH-RSA-AES128-GCM-SHA256
|
|
|
|
# server TLSv1.2 ECDH-RSA-AES256-GCM-SHA384
|
|
-v 3
|
|
-l ECDH-RSA-AES256-GCM-SHA384
|
|
-c ./certs/server-ecc-rsa.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.2 ECDH-RSA-AES256-GCM-SHA384
|
|
-v 3
|
|
-l ECDH-RSA-AES256-GCM-SHA384
|
|
|
|
# server TLSv1.2 DHE-RSA-AES128-GCM-SHA256
|
|
-v 3
|
|
-l DHE-RSA-AES128-GCM-SHA256
|
|
|
|
# client TLSv1.2 DHE-RSA-AES128-GCM-SHA256
|
|
-v 3
|
|
-l DHE-RSA-AES128-GCM-SHA256
|
|
|
|
# server TLSv1.2 DHE-RSA-AES256-GCM-SHA384
|
|
-v 3
|
|
-l DHE-RSA-AES256-GCM-SHA384
|
|
|
|
# client TLSv1.2 DHE-RSA-AES256-GCM-SHA384
|
|
-v 3
|
|
-l DHE-RSA-AES256-GCM-SHA384
|
|
|
|
# server TLSv1.2 PSK-AES128-GCM-SHA256
|
|
-s
|
|
-v 3
|
|
-l PSK-AES128-GCM-SHA256
|
|
|
|
# client TLSv1.2 PSK-AES128-GCM-SHA256
|
|
-s
|
|
-v 3
|
|
-l PSK-AES128-GCM-SHA256
|
|
|
|
# server TLSv1.2 PSK-AES256-GCM-SHA384
|
|
-s
|
|
-v 3
|
|
-l PSK-AES256-GCM-SHA384
|
|
|
|
# client TLSv1.2 PSK-AES256-GCM-SHA384
|
|
-s
|
|
-v 3
|
|
-l PSK-AES256-GCM-SHA384
|
|
|
|
# server TLSv1.2 AES128-CCM-8
|
|
-v 3
|
|
-l AES128-CCM-8
|
|
|
|
# client TLSv1.2 AES128-CCM-8
|
|
-v 3
|
|
-l AES128-CCM-8
|
|
|
|
# server TLSv1.2 AES256-CCM-8
|
|
-v 3
|
|
-l AES256-CCM-8
|
|
|
|
# client TLSv1.2 AES256-CCM-8
|
|
-v 3
|
|
-l AES256-CCM-8
|
|
|
|
# server TLSv1.2 ECDHE-ECDSA-AES128-CCM-8
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES128-CCM-8
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.2 ECDHE-ECDSA-AES128-CCM-8
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES128-CCM-8
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1.2 ECDHE-ECDSA-AES256-CCM-8
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES256-CCM-8
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
|
|
# client TLSv1.2 ECDHE-ECDSA-AES256-CCM-8
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES256-CCM-8
|
|
-A ./certs/server-ecc.pem
|
|
|
|
# server TLSv1.2 PSK-AES128-CCM
|
|
-s
|
|
-v 3
|
|
-l PSK-AES128-CCM
|
|
|
|
# client TLSv1.2 PSK-AES128-CCM
|
|
-s
|
|
-v 3
|
|
-l PSK-AES128-CCM
|
|
|
|
# server TLSv1.2 PSK-AES256-CCM
|
|
-s
|
|
-v 3
|
|
-l PSK-AES256-CCM
|
|
|
|
# client TLSv1.2 PSK-AES256-CCM
|
|
-s
|
|
-v 3
|
|
-l PSK-AES256-CCM
|
|
|
|
# server TLSv1.2 PSK-AES128-CCM-8
|
|
-s
|
|
-v 3
|
|
-l PSK-AES128-CCM-8
|
|
|
|
# client TLSv1.2 PSK-AES128-CCM-8
|
|
-s
|
|
-v 3
|
|
-l PSK-AES128-CCM-8
|
|
|
|
# server TLSv1.2 PSK-AES256-CCM-8
|
|
-s
|
|
-v 3
|
|
-l PSK-AES256-CCM-8
|
|
|
|
# client TLSv1.2 PSK-AES256-CCM-8
|
|
-s
|
|
-v 3
|
|
-l PSK-AES256-CCM-8
|
|
|
|
# server TLSv1.0 DHE-PSK-AES128-CBC-SHA256
|
|
-s
|
|
-v 1
|
|
-l DHE-PSK-AES128-CBC-SHA256
|
|
|
|
# client TLSv1.0 DHE-PSK-AES128-CBC-SHA256
|
|
-s
|
|
-v 1
|
|
-l DHE-PSK-AES128-CBC-SHA256
|
|
|
|
# server TLSv1.1 DHE-PSK-AES128-CBC-SHA256
|
|
-s
|
|
-v 2
|
|
-l DHE-PSK-AES128-CBC-SHA256
|
|
|
|
# client TLSv1.1 DHE-PSK-AES128-CBC-SHA256
|
|
-s
|
|
-v 2
|
|
-l DHE-PSK-AES128-CBC-SHA256
|
|
|
|
# server TLSv1.2 DHE-PSK-AES128-CBC-SHA256
|
|
-s
|
|
-v 3
|
|
-l DHE-PSK-AES128-CBC-SHA256
|
|
|
|
# client TLSv1.2 DHE-PSK-AES128-CBC-SHA256
|
|
-s
|
|
-v 3
|
|
-l DHE-PSK-AES128-CBC-SHA256
|
|
|
|
# server TLSv1.0 DHE-PSK-AES256-CBC-SHA384
|
|
-s
|
|
-v 1
|
|
-l DHE-PSK-AES256-CBC-SHA384
|
|
|
|
# client TLSv1.0 DHE-PSK-AES256-CBC-SHA384
|
|
-s
|
|
-v 1
|
|
-l DHE-PSK-AES256-CBC-SHA384
|
|
|
|
# server TLSv1.1 DHE-PSK-AES256-CBC-SHA384
|
|
-s
|
|
-v 2
|
|
-l DHE-PSK-AES256-CBC-SHA384
|
|
|
|
# client TLSv1.1 DHE-PSK-AES256-CBC-SHA384
|
|
-s
|
|
-v 2
|
|
-l DHE-PSK-AES256-CBC-SHA384
|
|
|
|
# server TLSv1.2 DHE-PSK-AES256-CBC-SHA384
|
|
-s
|
|
-v 3
|
|
-l DHE-PSK-AES256-CBC-SHA384
|
|
|
|
# client TLSv1.2 DHE-PSK-AES256-CBC-SHA384
|
|
-s
|
|
-v 3
|
|
-l DHE-PSK-AES256-CBC-SHA384
|
|
|
|
# server TLSv1.0 DHE-PSK-NULL-SHA256
|
|
-s
|
|
-v 1
|
|
-l DHE-PSK-NULL-SHA256
|
|
|
|
# client TLSv1.0 DHE-PSK-NULL-SHA256
|
|
-s
|
|
-v 1
|
|
-l DHE-PSK-NULL-SHA256
|
|
|
|
# server TLSv1.1 DHE-PSK-NULL-SHA256
|
|
-s
|
|
-v 2
|
|
-l DHE-PSK-NULL-SHA256
|
|
|
|
# client TLSv1.1 DHE-PSK-NULL-SHA256
|
|
-s
|
|
-v 2
|
|
-l DHE-PSK-NULL-SHA256
|
|
|
|
# server TLSv1.2 DHE-PSK-NULL-SHA256
|
|
-s
|
|
-v 3
|
|
-l DHE-PSK-NULL-SHA256
|
|
|
|
# client TLSv1.2 DHE-PSK-NULL-SHA256
|
|
-s
|
|
-v 3
|
|
-l DHE-PSK-NULL-SHA256
|
|
|
|
# server TLSv1.0 DHE-PSK-NULL-SHA384
|
|
-s
|
|
-v 1
|
|
-l DHE-PSK-NULL-SHA384
|
|
|
|
# client TLSv1.0 DHE-PSK-NULL-SHA384
|
|
-s
|
|
-v 1
|
|
-l DHE-PSK-NULL-SHA384
|
|
|
|
# server TLSv1.1 DHE-PSK-NULL-SHA384
|
|
-s
|
|
-v 2
|
|
-l DHE-PSK-NULL-SHA384
|
|
|
|
# client TLSv1.1 DHE-PSK-NULL-SHA384
|
|
-s
|
|
-v 2
|
|
-l DHE-PSK-NULL-SHA384
|
|
|
|
# server TLSv1.2 DHE-PSK-NULL-SHA384
|
|
-s
|
|
-v 3
|
|
-l DHE-PSK-NULL-SHA384
|
|
|
|
# client TLSv1.2 DHE-PSK-NULL-SHA384
|
|
-s
|
|
-v 3
|
|
-l DHE-PSK-NULL-SHA384
|
|
|
|
# server TLSv1.2 DHE-PSK-AES128-GCM-SHA256
|
|
-s
|
|
-v 3
|
|
-l DHE-PSK-AES128-GCM-SHA256
|
|
|
|
# client TLSv1.2 DHE-PSK-AES128-GCM-SHA256
|
|
-s
|
|
-v 3
|
|
-l DHE-PSK-AES128-GCM-SHA256
|
|
|
|
# server TLSv1.2 DHE-PSK-AES256-GCM-SHA384
|
|
-s
|
|
-v 3
|
|
-l DHE-PSK-AES256-GCM-SHA384
|
|
|
|
# client TLSv1.2 DHE-PSK-AES256-GCM-SHA384
|
|
-s
|
|
-v 3
|
|
-l DHE-PSK-AES256-GCM-SHA384
|
|
|
|
# server TLSv1.2 DHE-PSK-AES128-CCM
|
|
-s
|
|
-v 3
|
|
-l DHE-PSK-AES128-CCM
|
|
|
|
# client TLSv1.2 DHE-PSK-AES128-CCM
|
|
-s
|
|
-v 3
|
|
-l DHE-PSK-AES128-CCM
|
|
|
|
# server TLSv1.2 DHE-PSK-AES256-CCM
|
|
-s
|
|
-v 3
|
|
-l DHE-PSK-AES256-CCM
|
|
|
|
# client TLSv1.2 DHE-PSK-AES256-CCM
|
|
-s
|
|
-v 3
|
|
-l DHE-PSK-AES256-CCM
|
|
|