Confirmed users
529
edits
Security/Server Side TLS: Difference between revisions
Jump to navigation
Jump to search
→GnuTLS ciphersuite
(Version 3. See changelog) |
|||
| Line 2,424: | Line 2,424: | ||
Using the reference ciphersuite for OpenSSL and the convertion tool below, we obtain the following ciphersuite for GnuTLS. Be aware that some ciphers might be missing, since OpenSSL supports more cryptographic algorithms that GnuTLS. | Using the reference ciphersuite for OpenSSL and the convertion tool below, we obtain the following ciphersuite for GnuTLS. Be aware that some ciphers might be missing, since OpenSSL supports more cryptographic algorithms that GnuTLS. | ||
'''TLS_ECDHE_RSA_AES_128_GCM_SHA256:TLS_ECDHE_ECDSA_AES_128_GCM_SHA256:TLS_ECDHE_RSA_AES_256_GCM_SHA384:TLS_ECDHE_ECDSA_AES_256_GCM_SHA384:TLS_DHE_RSA_AES_128_GCM_SHA256:TLS_DHE_DSS_AES_128_GCM_SHA256:TLS_ECDHE_RSA_AES_128_CBC_SHA256:TLS_ECDHE_ECDSA_AES_128_CBC_SHA256:TLS_ECDHE_RSA_AES_128_CBC_SHA1:TLS_ECDHE_ECDSA_AES_128_CBC_SHA1:TLS_ECDHE_ECDSA_AES_256_CBC_SHA384:TLS_ECDHE_RSA_AES_256_CBC_SHA1:TLS_ECDHE_ECDSA_AES_256_CBC_SHA1:TLS_DHE_RSA_AES_128_CBC_SHA256:TLS_DHE_RSA_AES_128_CBC_SHA1:TLS_DHE_DSS_AES_128_CBC_SHA256:TLS_DHE_RSA_AES_256_CBC_SHA256:TLS_DHE_DSS_AES_256_CBC_SHA1:TLS_DHE_RSA_AES_256_CBC_SHA1:TLS_RSA_AES_128_GCM_SHA256:TLS_DHE_DSS_AES_128_CBC_SHA1:TLS_RSA_AES_128_CBC_SHA256:TLS_RSA_AES_128_CBC_SHA1:TLS_DHE_DSS_AES_256_CBC_SHA256:TLS_RSA_AES_256_CBC_SHA256:TLS_RSA_AES_256_CBC_SHA1:TLS_RSA_3DES_EDE_CBC_SHA1:TLS_DHE_RSA_CAMELLIA_256_CBC_SHA1:TLS_DHE_DSS_CAMELLIA_256_CBC_SHA1:TLS_RSA_CAMELLIA_256_CBC_SHA1:TLS_ECDHE_RSA_3DES_EDE_CBC_SHA1:TLS_ECDHE_ECDSA_3DES_EDE_CBC_SHA1:TLS_DHE_RSA_3DES_EDE_CBC_SHA1:TLS_DHE_DSS_3DES_EDE_CBC_SHA1:TLS_DHE_RSA_CAMELLIA_128_CBC_SHA1:TLS_DHE_DSS_CAMELLIA_128_CBC_SHA1:TLS_RSA_CAMELLIA_128_CBC_SHA1''' | '''TLS_ECDHE_RSA_AES_128_GCM_SHA256:TLS_ECDHE_ECDSA_AES_128_GCM_SHA256:TLS_ECDHE_RSA_AES_256_GCM_SHA384:TLS_ECDHE_ECDSA_AES_256_GCM_SHA384: | ||
TLS_DHE_RSA_AES_128_GCM_SHA256:TLS_DHE_DSS_AES_128_GCM_SHA256:TLS_ECDHE_RSA_AES_128_CBC_SHA256:TLS_ECDHE_ECDSA_AES_128_CBC_SHA256: | |||
TLS_ECDHE_RSA_AES_128_CBC_SHA1:TLS_ECDHE_ECDSA_AES_128_CBC_SHA1:TLS_ECDHE_ECDSA_AES_256_CBC_SHA384:TLS_ECDHE_RSA_AES_256_CBC_SHA1: | |||
TLS_ECDHE_ECDSA_AES_256_CBC_SHA1:TLS_DHE_RSA_AES_128_CBC_SHA256:TLS_DHE_RSA_AES_128_CBC_SHA1:TLS_DHE_DSS_AES_128_CBC_SHA256: | |||
TLS_DHE_RSA_AES_256_CBC_SHA256:TLS_DHE_DSS_AES_256_CBC_SHA1:TLS_DHE_RSA_AES_256_CBC_SHA1:TLS_RSA_AES_128_GCM_SHA256:TLS_DHE_DSS_AES_128_CBC_SHA1: | |||
TLS_RSA_AES_128_CBC_SHA256:TLS_RSA_AES_128_CBC_SHA1:TLS_DHE_DSS_AES_256_CBC_SHA256:TLS_RSA_AES_256_CBC_SHA256:TLS_RSA_AES_256_CBC_SHA1: | |||
TLS_RSA_3DES_EDE_CBC_SHA1:TLS_DHE_RSA_CAMELLIA_256_CBC_SHA1:TLS_DHE_DSS_CAMELLIA_256_CBC_SHA1:TLS_RSA_CAMELLIA_256_CBC_SHA1: | |||
TLS_ECDHE_RSA_3DES_EDE_CBC_SHA1:TLS_ECDHE_ECDSA_3DES_EDE_CBC_SHA1:TLS_DHE_RSA_3DES_EDE_CBC_SHA1:TLS_DHE_DSS_3DES_EDE_CBC_SHA1: | |||
TLS_DHE_RSA_CAMELLIA_128_CBC_SHA1:TLS_DHE_DSS_CAMELLIA_128_CBC_SHA1:TLS_RSA_CAMELLIA_128_CBC_SHA1''' | |||
=== Conversion from OpenSSL to GnuTLS === | === Conversion from OpenSSL to GnuTLS === | ||