Author: markt
Date: Thu Feb 9 20:16:39 2017
New Revision: 1782383
URL: http://svn.apache.org/viewvc?rev=1782383&view=rev
Log:
Explicitly list out the TLSv1.3 ciphers as not implemented in the JREs. This
should address a Gump failure.
Modified:
tomcat/trunk/test/org/apache/tomcat/util/net/openssl/ciphers/TestCipher.java
Modified:
tomcat/trunk/test/org/apache/tomcat/util/net/openssl/ciphers/TestCipher.java
URL:
http://svn.apache.org/viewvc/tomcat/trunk/test/org/apache/tomcat/util/net/openssl/ciphers/TestCipher.java?rev=1782383&r1=1782382&r2=1782383&view=diff
==============================================================================
---
tomcat/trunk/test/org/apache/tomcat/util/net/openssl/ciphers/TestCipher.java
(original)
+++
tomcat/trunk/test/org/apache/tomcat/util/net/openssl/ciphers/TestCipher.java
Thu Feb 9 20:16:39 2017
@@ -35,7 +35,7 @@ public class TestCipher {
@Test
public void testAllOpenSSLCiphersMapped() throws Exception {
Set<String> openSSLCipherSuites =
-
TesterOpenSSL.getOpenSSLCiphersAsSet("ALL:eNULL:!TLS13-AES-128-GCM-SHA256");
+ TesterOpenSSL.getOpenSSLCiphersAsSet("ALL:eNULL");
StringBuilder errors = new StringBuilder();
@@ -50,8 +50,8 @@ public class TestCipher {
found = true;
if
(jsseImpl.getOpenSslUnmapped().contains(openSSLCipherSuite)) {
errors.append("Mapping found in " +
jsseImpl.getVendor() +
- "'s JSSE implementation for " +
openSSLCipherSuite +
- " when none was expected\n");
+ "'s JSSE implementation for " +
openSSLCipherSuite +
+ " when none was expected\n");
}
break;
}
@@ -77,8 +77,9 @@ public class TestCipher {
// OpenSSL does not include ECDH/ECDHE ciphers in all and there is no
// EC alias. Use aRSA.
// OpenSSL 1.0.0 onwards does not include eNULL in all.
+ // TLS 1.3 is still i
Set<String> availableCipherSuites =
-
TesterOpenSSL.getOpenSSLCiphersAsSet("ALL:eNULL:aRSA:!TLS13-AES-128-GCM-SHA256");
+ TesterOpenSSL.getOpenSSLCiphersAsSet("ALL:eNULL:aRSA");
Set<String> expectedCipherSuites = new HashSet<>();
for (Cipher cipher : Cipher.values()) {
if (TesterOpenSSL.OPENSSL_UNIMPLEMENTED_CIPHERS.contains(cipher)) {
@@ -141,216 +142,216 @@ public class TestCipher {
*/
private static final Set<String> CIPHER_SUITE_STANDARD_NAMES_ORACLE =
Collections.unmodifiableSet(new HashSet<>(Arrays.asList(
- "SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA",
- "SSL_DH_anon_EXPORT_WITH_RC4_40_MD5",
- "SSL_DH_anon_WITH_3DES_EDE_CBC_SHA",
- "TLS_DH_anon_WITH_AES_128_CBC_SHA",
- "TLS_DH_anon_WITH_AES_128_CBC_SHA256",
- "TLS_DH_anon_WITH_AES_128_GCM_SHA256",
- "TLS_DH_anon_WITH_AES_256_CBC_SHA",
- "TLS_DH_anon_WITH_AES_256_CBC_SHA256",
- "TLS_DH_anon_WITH_AES_256_GCM_SHA384",
- "TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA",
- "TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256",
- "TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA",
- "TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256",
- "SSL_DH_anon_WITH_DES_CBC_SHA",
- "SSL_DH_anon_WITH_RC4_128_MD5",
- "TLS_DH_anon_WITH_SEED_CBC_SHA",
- "SSL_DH_DSS_EXPORT_WITH_DES40_CBC_SHA",
- "SSL_DH_DSS_WITH_3DES_EDE_CBC_SHA",
- "TLS_DH_DSS_WITH_AES_128_CBC_SHA",
- "TLS_DH_DSS_WITH_AES_128_CBC_SHA256",
- "TLS_DH_DSS_WITH_AES_128_GCM_SHA256",
- "TLS_DH_DSS_WITH_AES_256_CBC_SHA",
- "TLS_DH_DSS_WITH_AES_256_CBC_SHA256",
- "TLS_DH_DSS_WITH_AES_256_GCM_SHA384",
- "TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA",
- "TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256",
- "TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA",
- "TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256",
- "SSL_DH_DSS_WITH_DES_CBC_SHA",
- "TLS_DH_DSS_WITH_SEED_CBC_SHA",
- "SSL_DH_RSA_EXPORT_WITH_DES40_CBC_SHA",
- "SSL_DH_RSA_WITH_3DES_EDE_CBC_SHA",
- "TLS_DH_RSA_WITH_AES_128_CBC_SHA",
- "TLS_DH_RSA_WITH_AES_128_CBC_SHA256",
- "TLS_DH_RSA_WITH_AES_128_GCM_SHA256",
- "TLS_DH_RSA_WITH_AES_256_CBC_SHA",
- "TLS_DH_RSA_WITH_AES_256_CBC_SHA256",
- "TLS_DH_RSA_WITH_AES_256_GCM_SHA384",
- "TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA",
- "TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256",
- "TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA",
- "TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256",
- "SSL_DH_RSA_WITH_DES_CBC_SHA",
- "TLS_DH_RSA_WITH_SEED_CBC_SHA",
- "SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA",
- "SSL_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA",
- "SSL_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA",
- "SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA",
- "TLS_DHE_DSS_WITH_AES_128_CBC_SHA",
- "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256",
- "TLS_DHE_DSS_WITH_AES_128_GCM_SHA256",
- "TLS_DHE_DSS_WITH_AES_256_CBC_SHA",
- "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256",
- "TLS_DHE_DSS_WITH_AES_256_GCM_SHA384",
- "TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA",
- "TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256",
- "TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA",
- "TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256",
- "SSL_DHE_DSS_WITH_DES_CBC_SHA",
- "SSL_DHE_DSS_WITH_RC4_128_SHA",
- "TLS_DHE_DSS_WITH_SEED_CBC_SHA",
- "TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA",
- "TLS_DHE_PSK_WITH_AES_128_CBC_SHA",
- "TLS_DHE_PSK_WITH_AES_128_CBC_SHA256",
- "TLS_DHE_PSK_WITH_AES_128_GCM_SHA256",
- "TLS_DHE_PSK_WITH_AES_256_CBC_SHA",
- "TLS_DHE_PSK_WITH_AES_256_CBC_SHA384",
- "TLS_DHE_PSK_WITH_AES_256_GCM_SHA384",
- "TLS_DHE_PSK_WITH_NULL_SHA",
- "TLS_DHE_PSK_WITH_NULL_SHA256",
- "TLS_DHE_PSK_WITH_NULL_SHA384",
- "TLS_DHE_PSK_WITH_RC4_128_SHA",
- "SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA",
- "SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA",
- "TLS_DHE_RSA_WITH_AES_128_CBC_SHA",
- "TLS_DHE_RSA_WITH_AES_128_CBC_SHA256",
- "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256",
- "TLS_DHE_RSA_WITH_AES_256_CBC_SHA",
- "TLS_DHE_RSA_WITH_AES_256_CBC_SHA256",
- "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384",
- "TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA",
- "TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256",
- "TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA",
- "TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256",
- "SSL_DHE_RSA_WITH_DES_CBC_SHA",
- "TLS_DHE_RSA_WITH_SEED_CBC_SHA",
- "TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA",
- "TLS_ECDH_anon_WITH_AES_128_CBC_SHA",
- "TLS_ECDH_anon_WITH_AES_256_CBC_SHA",
- "TLS_ECDH_anon_WITH_NULL_SHA",
- "TLS_ECDH_anon_WITH_RC4_128_SHA",
- "TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA",
- "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA",
- "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256",
- "TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256",
- "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA",
- "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384",
- "TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384",
- "TLS_ECDH_ECDSA_WITH_NULL_SHA",
- "TLS_ECDH_ECDSA_WITH_RC4_128_SHA",
- "TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA",
- "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA",
- "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256",
- "TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256",
- "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA",
- "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384",
- "TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384",
- "TLS_ECDH_RSA_WITH_NULL_SHA",
- "TLS_ECDH_RSA_WITH_RC4_128_SHA",
- "TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA",
- "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA",
- "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256",
- "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
- "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA",
- "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384",
- "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
- "TLS_ECDHE_ECDSA_WITH_NULL_SHA",
- "TLS_ECDHE_ECDSA_WITH_RC4_128_SHA",
- "TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA",
- "TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA",
- "TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256",
- "TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA",
- "TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384",
- "TLS_ECDHE_PSK_WITH_NULL_SHA",
- "TLS_ECDHE_PSK_WITH_NULL_SHA256",
- "TLS_ECDHE_PSK_WITH_NULL_SHA384",
- "TLS_ECDHE_PSK_WITH_RC4_128_SHA",
- "TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA",
- "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA",
- "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256",
- "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
- "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA",
- "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384",
- "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
- "TLS_ECDHE_RSA_WITH_NULL_SHA",
- "TLS_ECDHE_RSA_WITH_RC4_128_SHA",
- "TLS_EMPTY_RENEGOTIATION_INFO_SCSV",
- "SSL_FORTEZZA_DMS_WITH_FORTEZZA_CBC_SHA",
- "SSL_FORTEZZA_DMS_WITH_NULL_SHA",
- "TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5",
- "TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA",
- "TLS_KRB5_EXPORT_WITH_RC2_CBC_40_MD5",
- "TLS_KRB5_EXPORT_WITH_RC2_CBC_40_SHA",
- "TLS_KRB5_EXPORT_WITH_RC4_40_MD5",
- "TLS_KRB5_EXPORT_WITH_RC4_40_SHA",
- "TLS_KRB5_WITH_3DES_EDE_CBC_MD5",
- "TLS_KRB5_WITH_3DES_EDE_CBC_SHA",
- "TLS_KRB5_WITH_DES_CBC_MD5",
- "TLS_KRB5_WITH_DES_CBC_SHA",
- "TLS_KRB5_WITH_IDEA_CBC_MD5",
- "TLS_KRB5_WITH_IDEA_CBC_SHA",
- "TLS_KRB5_WITH_RC4_128_MD5",
- "TLS_KRB5_WITH_RC4_128_SHA",
- "TLS_PSK_WITH_3DES_EDE_CBC_SHA",
- "TLS_PSK_WITH_AES_128_CBC_SHA",
- "TLS_PSK_WITH_AES_128_CBC_SHA256",
- "TLS_PSK_WITH_AES_128_GCM_SHA256",
- "TLS_PSK_WITH_AES_256_CBC_SHA",
- "TLS_PSK_WITH_AES_256_CBC_SHA384",
- "TLS_PSK_WITH_AES_256_GCM_SHA384",
- "TLS_PSK_WITH_NULL_SHA",
- "TLS_PSK_WITH_NULL_SHA256",
- "TLS_PSK_WITH_NULL_SHA384",
- "TLS_PSK_WITH_RC4_128_SHA",
- "SSL_RSA_EXPORT_WITH_DES40_CBC_SHA",
- "SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5",
- "SSL_RSA_EXPORT_WITH_RC4_40_MD5",
- "SSL_RSA_EXPORT1024_WITH_DES_CBC_SHA",
- "SSL_RSA_EXPORT1024_WITH_RC4_56_SHA",
- "SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA",
- "SSL_RSA_FIPS_WITH_DES_CBC_SHA",
- "TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA",
- "TLS_RSA_PSK_WITH_AES_128_CBC_SHA",
- "TLS_RSA_PSK_WITH_AES_128_CBC_SHA256",
- "TLS_RSA_PSK_WITH_AES_128_GCM_SHA256",
- "TLS_RSA_PSK_WITH_AES_256_CBC_SHA",
- "TLS_RSA_PSK_WITH_AES_256_CBC_SHA384",
- "TLS_RSA_PSK_WITH_AES_256_GCM_SHA384",
- "TLS_RSA_PSK_WITH_NULL_SHA",
- "TLS_RSA_PSK_WITH_NULL_SHA256",
- "TLS_RSA_PSK_WITH_NULL_SHA384",
- "TLS_RSA_PSK_WITH_RC4_128_SHA",
- "SSL_RSA_WITH_3DES_EDE_CBC_SHA",
- "TLS_RSA_WITH_AES_128_CBC_SHA",
- "TLS_RSA_WITH_AES_128_CBC_SHA256",
- "TLS_RSA_WITH_AES_128_GCM_SHA256",
- "TLS_RSA_WITH_AES_256_CBC_SHA",
- "TLS_RSA_WITH_AES_256_CBC_SHA256",
- "TLS_RSA_WITH_AES_256_GCM_SHA384",
- "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA",
- "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256",
- "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA",
- "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256",
- "SSL_RSA_WITH_DES_CBC_SHA",
- "SSL_RSA_WITH_IDEA_CBC_SHA",
- "SSL_RSA_WITH_NULL_MD5",
- "SSL_RSA_WITH_NULL_SHA",
- "TLS_RSA_WITH_NULL_SHA256",
- "SSL_RSA_WITH_RC4_128_MD5",
- "SSL_RSA_WITH_RC4_128_SHA",
- "TLS_RSA_WITH_SEED_CBC_SHA",
- "TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA",
- "TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA",
- "TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA",
- "TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA",
- "TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA",
- "TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA",
- "TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA",
- "TLS_SRP_SHA_WITH_AES_128_CBC_SHA",
- "TLS_SRP_SHA_WITH_AES_256_CBC_SHA")));
+ "SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA",
+ "SSL_DH_anon_EXPORT_WITH_RC4_40_MD5",
+ "SSL_DH_anon_WITH_3DES_EDE_CBC_SHA",
+ "TLS_DH_anon_WITH_AES_128_CBC_SHA",
+ "TLS_DH_anon_WITH_AES_128_CBC_SHA256",
+ "TLS_DH_anon_WITH_AES_128_GCM_SHA256",
+ "TLS_DH_anon_WITH_AES_256_CBC_SHA",
+ "TLS_DH_anon_WITH_AES_256_CBC_SHA256",
+ "TLS_DH_anon_WITH_AES_256_GCM_SHA384",
+ "TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA",
+ "TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256",
+ "TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA",
+ "TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256",
+ "SSL_DH_anon_WITH_DES_CBC_SHA",
+ "SSL_DH_anon_WITH_RC4_128_MD5",
+ "TLS_DH_anon_WITH_SEED_CBC_SHA",
+ "SSL_DH_DSS_EXPORT_WITH_DES40_CBC_SHA",
+ "SSL_DH_DSS_WITH_3DES_EDE_CBC_SHA",
+ "TLS_DH_DSS_WITH_AES_128_CBC_SHA",
+ "TLS_DH_DSS_WITH_AES_128_CBC_SHA256",
+ "TLS_DH_DSS_WITH_AES_128_GCM_SHA256",
+ "TLS_DH_DSS_WITH_AES_256_CBC_SHA",
+ "TLS_DH_DSS_WITH_AES_256_CBC_SHA256",
+ "TLS_DH_DSS_WITH_AES_256_GCM_SHA384",
+ "TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA",
+ "TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256",
+ "TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA",
+ "TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256",
+ "SSL_DH_DSS_WITH_DES_CBC_SHA",
+ "TLS_DH_DSS_WITH_SEED_CBC_SHA",
+ "SSL_DH_RSA_EXPORT_WITH_DES40_CBC_SHA",
+ "SSL_DH_RSA_WITH_3DES_EDE_CBC_SHA",
+ "TLS_DH_RSA_WITH_AES_128_CBC_SHA",
+ "TLS_DH_RSA_WITH_AES_128_CBC_SHA256",
+ "TLS_DH_RSA_WITH_AES_128_GCM_SHA256",
+ "TLS_DH_RSA_WITH_AES_256_CBC_SHA",
+ "TLS_DH_RSA_WITH_AES_256_CBC_SHA256",
+ "TLS_DH_RSA_WITH_AES_256_GCM_SHA384",
+ "TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA",
+ "TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256",
+ "TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA",
+ "TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256",
+ "SSL_DH_RSA_WITH_DES_CBC_SHA",
+ "TLS_DH_RSA_WITH_SEED_CBC_SHA",
+ "SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA",
+ "SSL_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA",
+ "SSL_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA",
+ "SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA",
+ "TLS_DHE_DSS_WITH_AES_128_CBC_SHA",
+ "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256",
+ "TLS_DHE_DSS_WITH_AES_128_GCM_SHA256",
+ "TLS_DHE_DSS_WITH_AES_256_CBC_SHA",
+ "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256",
+ "TLS_DHE_DSS_WITH_AES_256_GCM_SHA384",
+ "TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA",
+ "TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256",
+ "TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA",
+ "TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256",
+ "SSL_DHE_DSS_WITH_DES_CBC_SHA",
+ "SSL_DHE_DSS_WITH_RC4_128_SHA",
+ "TLS_DHE_DSS_WITH_SEED_CBC_SHA",
+ "TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA",
+ "TLS_DHE_PSK_WITH_AES_128_CBC_SHA",
+ "TLS_DHE_PSK_WITH_AES_128_CBC_SHA256",
+ "TLS_DHE_PSK_WITH_AES_128_GCM_SHA256",
+ "TLS_DHE_PSK_WITH_AES_256_CBC_SHA",
+ "TLS_DHE_PSK_WITH_AES_256_CBC_SHA384",
+ "TLS_DHE_PSK_WITH_AES_256_GCM_SHA384",
+ "TLS_DHE_PSK_WITH_NULL_SHA",
+ "TLS_DHE_PSK_WITH_NULL_SHA256",
+ "TLS_DHE_PSK_WITH_NULL_SHA384",
+ "TLS_DHE_PSK_WITH_RC4_128_SHA",
+ "SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA",
+ "SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA",
+ "TLS_DHE_RSA_WITH_AES_128_CBC_SHA",
+ "TLS_DHE_RSA_WITH_AES_128_CBC_SHA256",
+ "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256",
+ "TLS_DHE_RSA_WITH_AES_256_CBC_SHA",
+ "TLS_DHE_RSA_WITH_AES_256_CBC_SHA256",
+ "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384",
+ "TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA",
+ "TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256",
+ "TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA",
+ "TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256",
+ "SSL_DHE_RSA_WITH_DES_CBC_SHA",
+ "TLS_DHE_RSA_WITH_SEED_CBC_SHA",
+ "TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA",
+ "TLS_ECDH_anon_WITH_AES_128_CBC_SHA",
+ "TLS_ECDH_anon_WITH_AES_256_CBC_SHA",
+ "TLS_ECDH_anon_WITH_NULL_SHA",
+ "TLS_ECDH_anon_WITH_RC4_128_SHA",
+ "TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA",
+ "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA",
+ "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256",
+ "TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256",
+ "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA",
+ "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384",
+ "TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384",
+ "TLS_ECDH_ECDSA_WITH_NULL_SHA",
+ "TLS_ECDH_ECDSA_WITH_RC4_128_SHA",
+ "TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA",
+ "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA",
+ "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256",
+ "TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256",
+ "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA",
+ "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384",
+ "TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384",
+ "TLS_ECDH_RSA_WITH_NULL_SHA",
+ "TLS_ECDH_RSA_WITH_RC4_128_SHA",
+ "TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA",
+ "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA",
+ "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256",
+ "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
+ "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA",
+ "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384",
+ "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
+ "TLS_ECDHE_ECDSA_WITH_NULL_SHA",
+ "TLS_ECDHE_ECDSA_WITH_RC4_128_SHA",
+ "TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA",
+ "TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA",
+ "TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256",
+ "TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA",
+ "TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384",
+ "TLS_ECDHE_PSK_WITH_NULL_SHA",
+ "TLS_ECDHE_PSK_WITH_NULL_SHA256",
+ "TLS_ECDHE_PSK_WITH_NULL_SHA384",
+ "TLS_ECDHE_PSK_WITH_RC4_128_SHA",
+ "TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA",
+ "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA",
+ "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256",
+ "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
+ "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA",
+ "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384",
+ "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
+ "TLS_ECDHE_RSA_WITH_NULL_SHA",
+ "TLS_ECDHE_RSA_WITH_RC4_128_SHA",
+ "TLS_EMPTY_RENEGOTIATION_INFO_SCSV",
+ "SSL_FORTEZZA_DMS_WITH_FORTEZZA_CBC_SHA",
+ "SSL_FORTEZZA_DMS_WITH_NULL_SHA",
+ "TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5",
+ "TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA",
+ "TLS_KRB5_EXPORT_WITH_RC2_CBC_40_MD5",
+ "TLS_KRB5_EXPORT_WITH_RC2_CBC_40_SHA",
+ "TLS_KRB5_EXPORT_WITH_RC4_40_MD5",
+ "TLS_KRB5_EXPORT_WITH_RC4_40_SHA",
+ "TLS_KRB5_WITH_3DES_EDE_CBC_MD5",
+ "TLS_KRB5_WITH_3DES_EDE_CBC_SHA",
+ "TLS_KRB5_WITH_DES_CBC_MD5",
+ "TLS_KRB5_WITH_DES_CBC_SHA",
+ "TLS_KRB5_WITH_IDEA_CBC_MD5",
+ "TLS_KRB5_WITH_IDEA_CBC_SHA",
+ "TLS_KRB5_WITH_RC4_128_MD5",
+ "TLS_KRB5_WITH_RC4_128_SHA",
+ "TLS_PSK_WITH_3DES_EDE_CBC_SHA",
+ "TLS_PSK_WITH_AES_128_CBC_SHA",
+ "TLS_PSK_WITH_AES_128_CBC_SHA256",
+ "TLS_PSK_WITH_AES_128_GCM_SHA256",
+ "TLS_PSK_WITH_AES_256_CBC_SHA",
+ "TLS_PSK_WITH_AES_256_CBC_SHA384",
+ "TLS_PSK_WITH_AES_256_GCM_SHA384",
+ "TLS_PSK_WITH_NULL_SHA",
+ "TLS_PSK_WITH_NULL_SHA256",
+ "TLS_PSK_WITH_NULL_SHA384",
+ "TLS_PSK_WITH_RC4_128_SHA",
+ "SSL_RSA_EXPORT_WITH_DES40_CBC_SHA",
+ "SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5",
+ "SSL_RSA_EXPORT_WITH_RC4_40_MD5",
+ "SSL_RSA_EXPORT1024_WITH_DES_CBC_SHA",
+ "SSL_RSA_EXPORT1024_WITH_RC4_56_SHA",
+ "SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA",
+ "SSL_RSA_FIPS_WITH_DES_CBC_SHA",
+ "TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA",
+ "TLS_RSA_PSK_WITH_AES_128_CBC_SHA",
+ "TLS_RSA_PSK_WITH_AES_128_CBC_SHA256",
+ "TLS_RSA_PSK_WITH_AES_128_GCM_SHA256",
+ "TLS_RSA_PSK_WITH_AES_256_CBC_SHA",
+ "TLS_RSA_PSK_WITH_AES_256_CBC_SHA384",
+ "TLS_RSA_PSK_WITH_AES_256_GCM_SHA384",
+ "TLS_RSA_PSK_WITH_NULL_SHA",
+ "TLS_RSA_PSK_WITH_NULL_SHA256",
+ "TLS_RSA_PSK_WITH_NULL_SHA384",
+ "TLS_RSA_PSK_WITH_RC4_128_SHA",
+ "SSL_RSA_WITH_3DES_EDE_CBC_SHA",
+ "TLS_RSA_WITH_AES_128_CBC_SHA",
+ "TLS_RSA_WITH_AES_128_CBC_SHA256",
+ "TLS_RSA_WITH_AES_128_GCM_SHA256",
+ "TLS_RSA_WITH_AES_256_CBC_SHA",
+ "TLS_RSA_WITH_AES_256_CBC_SHA256",
+ "TLS_RSA_WITH_AES_256_GCM_SHA384",
+ "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA",
+ "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256",
+ "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA",
+ "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256",
+ "SSL_RSA_WITH_DES_CBC_SHA",
+ "SSL_RSA_WITH_IDEA_CBC_SHA",
+ "SSL_RSA_WITH_NULL_MD5",
+ "SSL_RSA_WITH_NULL_SHA",
+ "TLS_RSA_WITH_NULL_SHA256",
+ "SSL_RSA_WITH_RC4_128_MD5",
+ "SSL_RSA_WITH_RC4_128_SHA",
+ "TLS_RSA_WITH_SEED_CBC_SHA",
+ "TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA",
+ "TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA",
+ "TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA",
+ "TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA",
+ "TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA",
+ "TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA",
+ "TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA",
+ "TLS_SRP_SHA_WITH_AES_128_CBC_SHA",
+ "TLS_SRP_SHA_WITH_AES_256_CBC_SHA")));
/**
@@ -408,7 +409,12 @@ public class TestCipher {
"RC4-MD5+SSLv2",
"RSA-PSK-CAMELLIA128-SHA256+TLSv1",
"RSA-PSK-CAMELLIA256-SHA384+TLSv1",
- "RSA-PSK-CHACHA20-POLY1305+TLSv1.2")));
+ "RSA-PSK-CHACHA20-POLY1305+TLSv1.2",
+ "TLS13-AES-256-GCM-SHA384+TLSv1.3",
+ "TLS13-CHACHA20-POLY1305-SHA256+TLSv1.3",
+ "TLS13-AES-128-GCM-SHA256+TLSv1.3",
+ "TLS13-AES-128-CCM-8-SHA256+TLSv1.3",
+ "TLS13-AES-128-CCM-SHA256+TLSv1.3")));
/**
@@ -426,106 +432,106 @@ public class TestCipher {
static {
Set<String> sslNames = new HashSet<>(Arrays.asList(
- "SSL_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384",
- "SSL_ECDHE_RSA_WITH_AES_256_CBC_SHA384",
- "SSL_RSA_WITH_AES_256_CBC_SHA256",
- "SSL_ECDH_ECDSA_WITH_AES_256_CBC_SHA384",
- "SSL_ECDH_RSA_WITH_AES_256_CBC_SHA384",
- "SSL_DHE_RSA_WITH_AES_256_CBC_SHA256",
- "SSL_DHE_DSS_WITH_AES_256_CBC_SHA256",
- "SSL_ECDHE_ECDSA_WITH_AES_256_CBC_SHA",
- "SSL_ECDHE_RSA_WITH_AES_256_CBC_SHA",
- "SSL_RSA_WITH_AES_256_CBC_SHA",
- "SSL_ECDH_ECDSA_WITH_AES_256_CBC_SHA",
- "SSL_ECDH_RSA_WITH_AES_256_CBC_SHA",
- "SSL_DHE_RSA_WITH_AES_256_CBC_SHA",
- "SSL_DHE_DSS_WITH_AES_256_CBC_SHA",
- "SSL_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256",
- "SSL_ECDHE_RSA_WITH_AES_128_CBC_SHA256",
- "SSL_RSA_WITH_AES_128_CBC_SHA256",
- "SSL_ECDH_ECDSA_WITH_AES_128_CBC_SHA256",
- "SSL_ECDH_RSA_WITH_AES_128_CBC_SHA256",
- "SSL_DHE_RSA_WITH_AES_128_CBC_SHA256",
- "SSL_DHE_DSS_WITH_AES_128_CBC_SHA256",
- "SSL_ECDHE_ECDSA_WITH_AES_128_CBC_SHA",
- "SSL_ECDHE_RSA_WITH_AES_128_CBC_SHA",
- "SSL_RSA_WITH_AES_128_CBC_SHA",
- "SSL_ECDH_ECDSA_WITH_AES_128_CBC_SHA",
- "SSL_ECDH_RSA_WITH_AES_128_CBC_SHA",
- "SSL_DHE_RSA_WITH_AES_128_CBC_SHA",
- "SSL_DHE_DSS_WITH_AES_128_CBC_SHA",
- "SSL_ECDHE_ECDSA_WITH_RC4_128_SHA",
- "SSL_ECDHE_RSA_WITH_RC4_128_SHA",
- "SSL_RSA_WITH_RC4_128_SHA",
- "SSL_ECDH_ECDSA_WITH_RC4_128_SHA",
- "SSL_ECDH_RSA_WITH_RC4_128_SHA",
- "SSL_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA",
- "SSL_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA",
- "SSL_RSA_WITH_3DES_EDE_CBC_SHA",
- "SSL_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA",
- "SSL_ECDH_RSA_WITH_3DES_EDE_CBC_SHA",
- "SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA",
- "SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA",
- "SSL_RSA_WITH_RC4_128_MD5",
- "TLS_EMPTY_RENEGOTIATION_INFO_SCSV",
- "SSL_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
- "SSL_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
- "SSL_RSA_WITH_AES_256_GCM_SHA384",
- "SSL_ECDH_ECDSA_WITH_AES_256_GCM_SHA384",
- "SSL_ECDH_RSA_WITH_AES_256_GCM_SHA384",
- "SSL_DHE_DSS_WITH_AES_256_GCM_SHA384",
- "SSL_DHE_RSA_WITH_AES_256_GCM_SHA384",
- "SSL_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
- "SSL_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
- "SSL_RSA_WITH_AES_128_GCM_SHA256",
- "SSL_ECDH_ECDSA_WITH_AES_128_GCM_SHA256",
- "SSL_ECDH_RSA_WITH_AES_128_GCM_SHA256",
- "SSL_DHE_RSA_WITH_AES_128_GCM_SHA256",
- "SSL_DHE_DSS_WITH_AES_128_GCM_SHA256",
- "SSL_DH_anon_WITH_AES_256_CBC_SHA256",
- "SSL_ECDH_anon_WITH_AES_256_CBC_SHA",
- "SSL_DH_anon_WITH_AES_256_CBC_SHA",
- "SSL_DH_anon_WITH_AES_256_GCM_SHA384",
- "SSL_DH_anon_WITH_AES_128_GCM_SHA256",
- "SSL_DH_anon_WITH_AES_128_CBC_SHA256",
- "SSL_ECDH_anon_WITH_AES_128_CBC_SHA",
- "SSL_DH_anon_WITH_AES_128_CBC_SHA",
- "SSL_ECDH_anon_WITH_RC4_128_SHA",
- "SSL_DH_anon_WITH_RC4_128_MD5",
- "SSL_ECDH_anon_WITH_3DES_EDE_CBC_SHA",
- "SSL_DH_anon_WITH_3DES_EDE_CBC_SHA",
- "SSL_RSA_WITH_NULL_SHA256",
- "SSL_ECDHE_ECDSA_WITH_NULL_SHA",
- "SSL_ECDHE_RSA_WITH_NULL_SHA",
- "SSL_RSA_WITH_NULL_SHA",
- "SSL_ECDH_ECDSA_WITH_NULL_SHA",
- "SSL_ECDH_RSA_WITH_NULL_SHA",
- "SSL_ECDH_anon_WITH_NULL_SHA",
- "SSL_RSA_WITH_NULL_MD5",
- "SSL_RSA_WITH_DES_CBC_SHA",
- "SSL_DHE_RSA_WITH_DES_CBC_SHA",
- "SSL_DHE_DSS_WITH_DES_CBC_SHA",
- "SSL_DH_anon_WITH_DES_CBC_SHA",
- "SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA",
- "SSL_RSA_FIPS_WITH_DES_EDE_CBC_SHA",
- "SSL_DHE_DSS_WITH_RC4_128_SHA",
- "SSL_RSA_EXPORT_WITH_RC4_40_MD5",
- "SSL_DH_anon_EXPORT_WITH_RC4_40_MD5",
- "SSL_RSA_EXPORT_WITH_DES40_CBC_SHA",
- "SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA",
- "SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA",
- "SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA",
- "SSL_KRB5_WITH_RC4_128_SHA",
- "SSL_KRB5_WITH_RC4_128_MD5",
- "SSL_KRB5_WITH_3DES_EDE_CBC_SHA",
- "SSL_KRB5_WITH_3DES_EDE_CBC_MD5",
- "SSL_KRB5_WITH_DES_CBC_SHA",
- "SSL_KRB5_WITH_DES_CBC_MD5",
- "SSL_KRB5_EXPORT_WITH_RC4_40_SHA",
- "SSL_KRB5_EXPORT_WITH_RC4_40_MD5",
- "SSL_KRB5_EXPORT_WITH_DES_CBC_40_SHA",
- "SSL_KRB5_EXPORT_WITH_DES_CBC_40_MD5",
- "SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5"));
+ "SSL_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384",
+ "SSL_ECDHE_RSA_WITH_AES_256_CBC_SHA384",
+ "SSL_RSA_WITH_AES_256_CBC_SHA256",
+ "SSL_ECDH_ECDSA_WITH_AES_256_CBC_SHA384",
+ "SSL_ECDH_RSA_WITH_AES_256_CBC_SHA384",
+ "SSL_DHE_RSA_WITH_AES_256_CBC_SHA256",
+ "SSL_DHE_DSS_WITH_AES_256_CBC_SHA256",
+ "SSL_ECDHE_ECDSA_WITH_AES_256_CBC_SHA",
+ "SSL_ECDHE_RSA_WITH_AES_256_CBC_SHA",
+ "SSL_RSA_WITH_AES_256_CBC_SHA",
+ "SSL_ECDH_ECDSA_WITH_AES_256_CBC_SHA",
+ "SSL_ECDH_RSA_WITH_AES_256_CBC_SHA",
+ "SSL_DHE_RSA_WITH_AES_256_CBC_SHA",
+ "SSL_DHE_DSS_WITH_AES_256_CBC_SHA",
+ "SSL_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256",
+ "SSL_ECDHE_RSA_WITH_AES_128_CBC_SHA256",
+ "SSL_RSA_WITH_AES_128_CBC_SHA256",
+ "SSL_ECDH_ECDSA_WITH_AES_128_CBC_SHA256",
+ "SSL_ECDH_RSA_WITH_AES_128_CBC_SHA256",
+ "SSL_DHE_RSA_WITH_AES_128_CBC_SHA256",
+ "SSL_DHE_DSS_WITH_AES_128_CBC_SHA256",
+ "SSL_ECDHE_ECDSA_WITH_AES_128_CBC_SHA",
+ "SSL_ECDHE_RSA_WITH_AES_128_CBC_SHA",
+ "SSL_RSA_WITH_AES_128_CBC_SHA",
+ "SSL_ECDH_ECDSA_WITH_AES_128_CBC_SHA",
+ "SSL_ECDH_RSA_WITH_AES_128_CBC_SHA",
+ "SSL_DHE_RSA_WITH_AES_128_CBC_SHA",
+ "SSL_DHE_DSS_WITH_AES_128_CBC_SHA",
+ "SSL_ECDHE_ECDSA_WITH_RC4_128_SHA",
+ "SSL_ECDHE_RSA_WITH_RC4_128_SHA",
+ "SSL_RSA_WITH_RC4_128_SHA",
+ "SSL_ECDH_ECDSA_WITH_RC4_128_SHA",
+ "SSL_ECDH_RSA_WITH_RC4_128_SHA",
+ "SSL_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA",
+ "SSL_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA",
+ "SSL_RSA_WITH_3DES_EDE_CBC_SHA",
+ "SSL_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA",
+ "SSL_ECDH_RSA_WITH_3DES_EDE_CBC_SHA",
+ "SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA",
+ "SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA",
+ "SSL_RSA_WITH_RC4_128_MD5",
+ "TLS_EMPTY_RENEGOTIATION_INFO_SCSV",
+ "SSL_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
+ "SSL_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
+ "SSL_RSA_WITH_AES_256_GCM_SHA384",
+ "SSL_ECDH_ECDSA_WITH_AES_256_GCM_SHA384",
+ "SSL_ECDH_RSA_WITH_AES_256_GCM_SHA384",
+ "SSL_DHE_DSS_WITH_AES_256_GCM_SHA384",
+ "SSL_DHE_RSA_WITH_AES_256_GCM_SHA384",
+ "SSL_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
+ "SSL_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
+ "SSL_RSA_WITH_AES_128_GCM_SHA256",
+ "SSL_ECDH_ECDSA_WITH_AES_128_GCM_SHA256",
+ "SSL_ECDH_RSA_WITH_AES_128_GCM_SHA256",
+ "SSL_DHE_RSA_WITH_AES_128_GCM_SHA256",
+ "SSL_DHE_DSS_WITH_AES_128_GCM_SHA256",
+ "SSL_DH_anon_WITH_AES_256_CBC_SHA256",
+ "SSL_ECDH_anon_WITH_AES_256_CBC_SHA",
+ "SSL_DH_anon_WITH_AES_256_CBC_SHA",
+ "SSL_DH_anon_WITH_AES_256_GCM_SHA384",
+ "SSL_DH_anon_WITH_AES_128_GCM_SHA256",
+ "SSL_DH_anon_WITH_AES_128_CBC_SHA256",
+ "SSL_ECDH_anon_WITH_AES_128_CBC_SHA",
+ "SSL_DH_anon_WITH_AES_128_CBC_SHA",
+ "SSL_ECDH_anon_WITH_RC4_128_SHA",
+ "SSL_DH_anon_WITH_RC4_128_MD5",
+ "SSL_ECDH_anon_WITH_3DES_EDE_CBC_SHA",
+ "SSL_DH_anon_WITH_3DES_EDE_CBC_SHA",
+ "SSL_RSA_WITH_NULL_SHA256",
+ "SSL_ECDHE_ECDSA_WITH_NULL_SHA",
+ "SSL_ECDHE_RSA_WITH_NULL_SHA",
+ "SSL_RSA_WITH_NULL_SHA",
+ "SSL_ECDH_ECDSA_WITH_NULL_SHA",
+ "SSL_ECDH_RSA_WITH_NULL_SHA",
+ "SSL_ECDH_anon_WITH_NULL_SHA",
+ "SSL_RSA_WITH_NULL_MD5",
+ "SSL_RSA_WITH_DES_CBC_SHA",
+ "SSL_DHE_RSA_WITH_DES_CBC_SHA",
+ "SSL_DHE_DSS_WITH_DES_CBC_SHA",
+ "SSL_DH_anon_WITH_DES_CBC_SHA",
+ "SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA",
+ "SSL_RSA_FIPS_WITH_DES_EDE_CBC_SHA",
+ "SSL_DHE_DSS_WITH_RC4_128_SHA",
+ "SSL_RSA_EXPORT_WITH_RC4_40_MD5",
+ "SSL_DH_anon_EXPORT_WITH_RC4_40_MD5",
+ "SSL_RSA_EXPORT_WITH_DES40_CBC_SHA",
+ "SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA",
+ "SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA",
+ "SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA",
+ "SSL_KRB5_WITH_RC4_128_SHA",
+ "SSL_KRB5_WITH_RC4_128_MD5",
+ "SSL_KRB5_WITH_3DES_EDE_CBC_SHA",
+ "SSL_KRB5_WITH_3DES_EDE_CBC_MD5",
+ "SSL_KRB5_WITH_DES_CBC_SHA",
+ "SSL_KRB5_WITH_DES_CBC_MD5",
+ "SSL_KRB5_EXPORT_WITH_RC4_40_SHA",
+ "SSL_KRB5_EXPORT_WITH_RC4_40_MD5",
+ "SSL_KRB5_EXPORT_WITH_DES_CBC_40_SHA",
+ "SSL_KRB5_EXPORT_WITH_DES_CBC_40_MD5",
+ "SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5"));
Set<String> allNames = new HashSet<>();
@@ -694,7 +700,12 @@ public class TestCipher {
"SRP-DSS-AES-256-CBC-SHA+SSLv3",
"SRP-RSA-3DES-EDE-CBC-SHA+SSLv3",
"SRP-RSA-AES-128-CBC-SHA+SSLv3",
- "SRP-RSA-AES-256-CBC-SHA+SSLv3")));
+ "SRP-RSA-AES-256-CBC-SHA+SSLv3",
+ "TLS13-AES-256-GCM-SHA384+TLSv1.3",
+ "TLS13-CHACHA20-POLY1305-SHA256+TLSv1.3",
+ "TLS13-AES-128-GCM-SHA256+TLSv1.3",
+ "TLS13-AES-128-CCM-8-SHA256+TLSv1.3",
+ "TLS13-AES-128-CCM-SHA256+TLSv1.3")));
private static JsseImpl ORACLE_JSSE_CIPHER_IMPL = new JsseImpl("Oracle",
@@ -739,331 +750,331 @@ public class TestCipher {
//
http://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml#tls-parameters-4
private static Set<String> REGISTERED_NAMES = Collections.unmodifiableSet(
new HashSet<>(Arrays.asList(
- "TLS_NULL_WITH_NULL_NULL",
- "TLS_RSA_WITH_NULL_MD5",
- "TLS_RSA_WITH_NULL_SHA",
- "TLS_RSA_EXPORT_WITH_RC4_40_MD5",
- "TLS_RSA_WITH_RC4_128_MD5",
- "TLS_RSA_WITH_RC4_128_SHA",
- "TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5",
- "TLS_RSA_WITH_IDEA_CBC_SHA",
- "TLS_RSA_EXPORT_WITH_DES40_CBC_SHA",
- "TLS_RSA_WITH_DES_CBC_SHA",
- "TLS_RSA_WITH_3DES_EDE_CBC_SHA",
- "TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA",
- "TLS_DH_DSS_WITH_DES_CBC_SHA",
- "TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA",
- "TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA",
- "TLS_DH_RSA_WITH_DES_CBC_SHA",
- "TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA",
- "TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA",
- "TLS_DHE_DSS_WITH_DES_CBC_SHA",
- "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA",
- "TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA",
- "TLS_DHE_RSA_WITH_DES_CBC_SHA",
- "TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA",
- "TLS_DH_anon_EXPORT_WITH_RC4_40_MD5",
- "TLS_DH_anon_WITH_RC4_128_MD5",
- "TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA",
- "TLS_DH_anon_WITH_DES_CBC_SHA",
- "TLS_DH_anon_WITH_3DES_EDE_CBC_SHA",
- "TLS_KRB5_WITH_DES_CBC_SHA",
- "TLS_KRB5_WITH_3DES_EDE_CBC_SHA",
- "TLS_KRB5_WITH_RC4_128_SHA",
- "TLS_KRB5_WITH_IDEA_CBC_SHA",
- "TLS_KRB5_WITH_DES_CBC_MD5",
- "TLS_KRB5_WITH_3DES_EDE_CBC_MD5",
- "TLS_KRB5_WITH_RC4_128_MD5",
- "TLS_KRB5_WITH_IDEA_CBC_MD5",
- "TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA",
- "TLS_KRB5_EXPORT_WITH_RC2_CBC_40_SHA",
- "TLS_KRB5_EXPORT_WITH_RC4_40_SHA",
- "TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5",
- "TLS_KRB5_EXPORT_WITH_RC2_CBC_40_MD5",
- "TLS_KRB5_EXPORT_WITH_RC4_40_MD5",
- "TLS_PSK_WITH_NULL_SHA",
- "TLS_DHE_PSK_WITH_NULL_SHA",
- "TLS_RSA_PSK_WITH_NULL_SHA",
- "TLS_RSA_WITH_AES_128_CBC_SHA",
- "TLS_DH_DSS_WITH_AES_128_CBC_SHA",
- "TLS_DH_RSA_WITH_AES_128_CBC_SHA",
- "TLS_DHE_DSS_WITH_AES_128_CBC_SHA",
- "TLS_DHE_RSA_WITH_AES_128_CBC_SHA",
- "TLS_DH_anon_WITH_AES_128_CBC_SHA",
- "TLS_RSA_WITH_AES_256_CBC_SHA",
- "TLS_DH_DSS_WITH_AES_256_CBC_SHA",
- "TLS_DH_RSA_WITH_AES_256_CBC_SHA",
- "TLS_DHE_DSS_WITH_AES_256_CBC_SHA",
- "TLS_DHE_RSA_WITH_AES_256_CBC_SHA",
- "TLS_DH_anon_WITH_AES_256_CBC_SHA",
- "TLS_RSA_WITH_NULL_SHA256",
- "TLS_RSA_WITH_AES_128_CBC_SHA256",
- "TLS_RSA_WITH_AES_256_CBC_SHA256",
- "TLS_DH_DSS_WITH_AES_128_CBC_SHA256",
- "TLS_DH_RSA_WITH_AES_128_CBC_SHA256",
- "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256",
- "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA",
- "TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA",
- "TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA",
- "TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA",
- "TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA",
- "TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA",
- "TLS_DHE_RSA_WITH_AES_128_CBC_SHA256",
- "TLS_DH_DSS_WITH_AES_256_CBC_SHA256",
- "TLS_DH_RSA_WITH_AES_256_CBC_SHA256",
- "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256",
- "TLS_DHE_RSA_WITH_AES_256_CBC_SHA256",
- "TLS_DH_anon_WITH_AES_128_CBC_SHA256",
- "TLS_DH_anon_WITH_AES_256_CBC_SHA256",
- "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA",
- "TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA",
- "TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA",
- "TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA",
- "TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA",
- "TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA",
- "TLS_PSK_WITH_RC4_128_SHA",
- "TLS_PSK_WITH_3DES_EDE_CBC_SHA",
- "TLS_PSK_WITH_AES_128_CBC_SHA",
- "TLS_PSK_WITH_AES_256_CBC_SHA",
- "TLS_DHE_PSK_WITH_RC4_128_SHA",
- "TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA",
- "TLS_DHE_PSK_WITH_AES_128_CBC_SHA",
- "TLS_DHE_PSK_WITH_AES_256_CBC_SHA",
- "TLS_RSA_PSK_WITH_RC4_128_SHA",
- "TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA",
- "TLS_RSA_PSK_WITH_AES_128_CBC_SHA",
- "TLS_RSA_PSK_WITH_AES_256_CBC_SHA",
- "TLS_RSA_WITH_SEED_CBC_SHA",
- "TLS_DH_DSS_WITH_SEED_CBC_SHA",
- "TLS_DH_RSA_WITH_SEED_CBC_SHA",
- "TLS_DHE_DSS_WITH_SEED_CBC_SHA",
- "TLS_DHE_RSA_WITH_SEED_CBC_SHA",
- "TLS_DH_anon_WITH_SEED_CBC_SHA",
- "TLS_RSA_WITH_AES_128_GCM_SHA256",
- "TLS_RSA_WITH_AES_256_GCM_SHA384",
- "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256",
- "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384",
- "TLS_DH_RSA_WITH_AES_128_GCM_SHA256",
- "TLS_DH_RSA_WITH_AES_256_GCM_SHA384",
- "TLS_DHE_DSS_WITH_AES_128_GCM_SHA256",
- "TLS_DHE_DSS_WITH_AES_256_GCM_SHA384",
- "TLS_DH_DSS_WITH_AES_128_GCM_SHA256",
- "TLS_DH_DSS_WITH_AES_256_GCM_SHA384",
- "TLS_DH_anon_WITH_AES_128_GCM_SHA256",
- "TLS_DH_anon_WITH_AES_256_GCM_SHA384",
- "TLS_PSK_WITH_AES_128_GCM_SHA256",
- "TLS_PSK_WITH_AES_256_GCM_SHA384",
- "TLS_DHE_PSK_WITH_AES_128_GCM_SHA256",
- "TLS_DHE_PSK_WITH_AES_256_GCM_SHA384",
- "TLS_RSA_PSK_WITH_AES_128_GCM_SHA256",
- "TLS_RSA_PSK_WITH_AES_256_GCM_SHA384",
- "TLS_PSK_WITH_AES_128_CBC_SHA256",
- "TLS_PSK_WITH_AES_256_CBC_SHA384",
- "TLS_PSK_WITH_NULL_SHA256",
- "TLS_PSK_WITH_NULL_SHA384",
- "TLS_DHE_PSK_WITH_AES_128_CBC_SHA256",
- "TLS_DHE_PSK_WITH_AES_256_CBC_SHA384",
- "TLS_DHE_PSK_WITH_NULL_SHA256",
- "TLS_DHE_PSK_WITH_NULL_SHA384",
- "TLS_RSA_PSK_WITH_AES_128_CBC_SHA256",
- "TLS_RSA_PSK_WITH_AES_256_CBC_SHA384",
- "TLS_RSA_PSK_WITH_NULL_SHA256",
- "TLS_RSA_PSK_WITH_NULL_SHA384",
- "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256",
- "TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256",
- "TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256",
- "TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256",
- "TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256",
- "TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256",
- "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256",
- "TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256",
- "TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256",
- "TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256",
- "TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256",
- "TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256",
- "TLS_EMPTY_RENEGOTIATION_INFO_SCSV",
- "TLS_ECDH_ECDSA_WITH_NULL_SHA",
- "TLS_ECDH_ECDSA_WITH_RC4_128_SHA",
- "TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA",
- "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA",
- "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA",
- "TLS_ECDHE_ECDSA_WITH_NULL_SHA",
- "TLS_ECDHE_ECDSA_WITH_RC4_128_SHA",
- "TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA",
- "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA",
- "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA",
- "TLS_ECDH_RSA_WITH_NULL_SHA",
- "TLS_ECDH_RSA_WITH_RC4_128_SHA",
- "TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA",
- "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA",
- "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA",
- "TLS_ECDHE_RSA_WITH_NULL_SHA",
- "TLS_ECDHE_RSA_WITH_RC4_128_SHA",
- "TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA",
- "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA",
- "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA",
- "TLS_ECDH_anon_WITH_NULL_SHA",
- "TLS_ECDH_anon_WITH_RC4_128_SHA",
- "TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA",
- "TLS_ECDH_anon_WITH_AES_128_CBC_SHA",
- "TLS_ECDH_anon_WITH_AES_256_CBC_SHA",
- "TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA",
- "TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA",
- "TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA",
- "TLS_SRP_SHA_WITH_AES_128_CBC_SHA",
- "TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA",
- "TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA",
- "TLS_SRP_SHA_WITH_AES_256_CBC_SHA",
- "TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA",
- "TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA",
- "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256",
- "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384",
- "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256",
- "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384",
- "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256",
- "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384",
- "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256",
- "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384",
- "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
- "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
- "TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256",
- "TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384",
- "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
- "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
- "TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256",
- "TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384",
- "TLS_ECDHE_PSK_WITH_RC4_128_SHA",
- "TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA",
- "TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA",
- "TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA",
- "TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256",
- "TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384",
- "TLS_ECDHE_PSK_WITH_NULL_SHA",
- "TLS_ECDHE_PSK_WITH_NULL_SHA256",
- "TLS_ECDHE_PSK_WITH_NULL_SHA384",
- "TLS_RSA_WITH_ARIA_128_CBC_SHA256",
- "TLS_RSA_WITH_ARIA_256_CBC_SHA384",
- "TLS_DH_DSS_WITH_ARIA_128_CBC_SHA256",
- "TLS_DH_DSS_WITH_ARIA_256_CBC_SHA384",
- "TLS_DH_RSA_WITH_ARIA_128_CBC_SHA256",
- "TLS_DH_RSA_WITH_ARIA_256_CBC_SHA384",
- "TLS_DHE_DSS_WITH_ARIA_128_CBC_SHA256",
- "TLS_DHE_DSS_WITH_ARIA_256_CBC_SHA384",
- "TLS_DHE_RSA_WITH_ARIA_128_CBC_SHA256",
- "TLS_DHE_RSA_WITH_ARIA_256_CBC_SHA384",
- "TLS_DH_anon_WITH_ARIA_128_CBC_SHA256",
- "TLS_DH_anon_WITH_ARIA_256_CBC_SHA384",
- "TLS_ECDHE_ECDSA_WITH_ARIA_128_CBC_SHA256",
- "TLS_ECDHE_ECDSA_WITH_ARIA_256_CBC_SHA384",
- "TLS_ECDH_ECDSA_WITH_ARIA_128_CBC_SHA256",
- "TLS_ECDH_ECDSA_WITH_ARIA_256_CBC_SHA384",
- "TLS_ECDHE_RSA_WITH_ARIA_128_CBC_SHA256",
- "TLS_ECDHE_RSA_WITH_ARIA_256_CBC_SHA384",
- "TLS_ECDH_RSA_WITH_ARIA_128_CBC_SHA256",
- "TLS_ECDH_RSA_WITH_ARIA_256_CBC_SHA384",
- "TLS_RSA_WITH_ARIA_128_GCM_SHA256",
- "TLS_RSA_WITH_ARIA_256_GCM_SHA384",
- "TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256",
- "TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384",
- "TLS_DH_RSA_WITH_ARIA_128_GCM_SHA256",
- "TLS_DH_RSA_WITH_ARIA_256_GCM_SHA384",
- "TLS_DHE_DSS_WITH_ARIA_128_GCM_SHA256",
- "TLS_DHE_DSS_WITH_ARIA_256_GCM_SHA384",
- "TLS_DH_DSS_WITH_ARIA_128_GCM_SHA256",
- "TLS_DH_DSS_WITH_ARIA_256_GCM_SHA384",
- "TLS_DH_anon_WITH_ARIA_128_GCM_SHA256",
- "TLS_DH_anon_WITH_ARIA_256_GCM_SHA384",
- "TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256",
- "TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384",
- "TLS_ECDH_ECDSA_WITH_ARIA_128_GCM_SHA256",
- "TLS_ECDH_ECDSA_WITH_ARIA_256_GCM_SHA384",
- "TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256",
- "TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384",
- "TLS_ECDH_RSA_WITH_ARIA_128_GCM_SHA256",
- "TLS_ECDH_RSA_WITH_ARIA_256_GCM_SHA384",
- "TLS_PSK_WITH_ARIA_128_CBC_SHA256",
- "TLS_PSK_WITH_ARIA_256_CBC_SHA384",
- "TLS_DHE_PSK_WITH_ARIA_128_CBC_SHA256",
- "TLS_DHE_PSK_WITH_ARIA_256_CBC_SHA384",
- "TLS_RSA_PSK_WITH_ARIA_128_CBC_SHA256",
- "TLS_RSA_PSK_WITH_ARIA_256_CBC_SHA384",
- "TLS_PSK_WITH_ARIA_128_GCM_SHA256",
- "TLS_PSK_WITH_ARIA_256_GCM_SHA384",
- "TLS_DHE_PSK_WITH_ARIA_128_GCM_SHA256",
- "TLS_DHE_PSK_WITH_ARIA_256_GCM_SHA384",
- "TLS_RSA_PSK_WITH_ARIA_128_GCM_SHA256",
- "TLS_RSA_PSK_WITH_ARIA_256_GCM_SHA384",
- "TLS_ECDHE_PSK_WITH_ARIA_128_CBC_SHA256",
- "TLS_ECDHE_PSK_WITH_ARIA_256_CBC_SHA384",
- "TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256",
- "TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384",
- "TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256",
- "TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384",
- "TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256",
- "TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384",
- "TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256",
- "TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384",
- "TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256",
- "TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384",
- "TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256",
- "TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384",
- "TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256",
- "TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384",
- "TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256",
- "TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384",
- "TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256",
- "TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384",
- "TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256",
- "TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384",
- "TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256",
- "TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384",
- "TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256",
- "TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384",
- "TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256",
- "TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384",
- "TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256",
- "TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384",
- "TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256",
- "TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384",
- "TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256",
- "TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384",
- "TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256",
- "TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384",
- "TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256",
- "TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384",
- "TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256",
- "TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384",
- "TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256",
- "TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384",
- "TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256",
- "TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384",
- "TLS_RSA_WITH_AES_128_CCM",
- "TLS_RSA_WITH_AES_256_CCM",
- "TLS_DHE_RSA_WITH_AES_128_CCM",
- "TLS_DHE_RSA_WITH_AES_256_CCM",
- "TLS_RSA_WITH_AES_128_CCM_8",
- "TLS_RSA_WITH_AES_256_CCM_8",
- "TLS_DHE_RSA_WITH_AES_128_CCM_8",
- "TLS_DHE_RSA_WITH_AES_256_CCM_8",
- "TLS_PSK_WITH_AES_128_CCM",
- "TLS_PSK_WITH_AES_256_CCM",
- "TLS_DHE_PSK_WITH_AES_128_CCM",
- "TLS_DHE_PSK_WITH_AES_256_CCM",
- "TLS_PSK_WITH_AES_128_CCM_8",
- "TLS_PSK_WITH_AES_256_CCM_8",
- "TLS_PSK_DHE_WITH_AES_128_CCM_8",
- "TLS_PSK_DHE_WITH_AES_256_CCM_8",
- "TLS_ECDHE_ECDSA_WITH_AES_128_CCM",
- "TLS_ECDHE_ECDSA_WITH_AES_256_CCM",
- "TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8",
- "TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8",
- // From
https://tools.ietf.org/html/draft-ietf-tls-chacha20-poly1305-04
- // These might change.
- "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256",
- "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256",
- "TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256",
- "TLS_PSK_WITH_CHACHA20_POLY1305_SHA256",
- "TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256",
- "TLS_DHE_PSK_WITH_CHACHA20_POLY1305_SHA256",
- "TLS_RSA_PSK_WITH_CHACHA20_POLY1305_SHA256")));
+ "TLS_NULL_WITH_NULL_NULL",
+ "TLS_RSA_WITH_NULL_MD5",
+ "TLS_RSA_WITH_NULL_SHA",
+ "TLS_RSA_EXPORT_WITH_RC4_40_MD5",
+ "TLS_RSA_WITH_RC4_128_MD5",
+ "TLS_RSA_WITH_RC4_128_SHA",
+ "TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5",
+ "TLS_RSA_WITH_IDEA_CBC_SHA",
+ "TLS_RSA_EXPORT_WITH_DES40_CBC_SHA",
+ "TLS_RSA_WITH_DES_CBC_SHA",
+ "TLS_RSA_WITH_3DES_EDE_CBC_SHA",
+ "TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA",
+ "TLS_DH_DSS_WITH_DES_CBC_SHA",
+ "TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA",
+ "TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA",
+ "TLS_DH_RSA_WITH_DES_CBC_SHA",
+ "TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA",
+ "TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA",
+ "TLS_DHE_DSS_WITH_DES_CBC_SHA",
+ "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA",
+ "TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA",
+ "TLS_DHE_RSA_WITH_DES_CBC_SHA",
+ "TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA",
+ "TLS_DH_anon_EXPORT_WITH_RC4_40_MD5",
+ "TLS_DH_anon_WITH_RC4_128_MD5",
+ "TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA",
+ "TLS_DH_anon_WITH_DES_CBC_SHA",
+ "TLS_DH_anon_WITH_3DES_EDE_CBC_SHA",
+ "TLS_KRB5_WITH_DES_CBC_SHA",
+ "TLS_KRB5_WITH_3DES_EDE_CBC_SHA",
+ "TLS_KRB5_WITH_RC4_128_SHA",
+ "TLS_KRB5_WITH_IDEA_CBC_SHA",
+ "TLS_KRB5_WITH_DES_CBC_MD5",
+ "TLS_KRB5_WITH_3DES_EDE_CBC_MD5",
+ "TLS_KRB5_WITH_RC4_128_MD5",
+ "TLS_KRB5_WITH_IDEA_CBC_MD5",
+ "TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA",
+ "TLS_KRB5_EXPORT_WITH_RC2_CBC_40_SHA",
+ "TLS_KRB5_EXPORT_WITH_RC4_40_SHA",
+ "TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5",
+ "TLS_KRB5_EXPORT_WITH_RC2_CBC_40_MD5",
+ "TLS_KRB5_EXPORT_WITH_RC4_40_MD5",
+ "TLS_PSK_WITH_NULL_SHA",
+ "TLS_DHE_PSK_WITH_NULL_SHA",
+ "TLS_RSA_PSK_WITH_NULL_SHA",
+ "TLS_RSA_WITH_AES_128_CBC_SHA",
+ "TLS_DH_DSS_WITH_AES_128_CBC_SHA",
+ "TLS_DH_RSA_WITH_AES_128_CBC_SHA",
+ "TLS_DHE_DSS_WITH_AES_128_CBC_SHA",
+ "TLS_DHE_RSA_WITH_AES_128_CBC_SHA",
+ "TLS_DH_anon_WITH_AES_128_CBC_SHA",
+ "TLS_RSA_WITH_AES_256_CBC_SHA",
+ "TLS_DH_DSS_WITH_AES_256_CBC_SHA",
+ "TLS_DH_RSA_WITH_AES_256_CBC_SHA",
+ "TLS_DHE_DSS_WITH_AES_256_CBC_SHA",
+ "TLS_DHE_RSA_WITH_AES_256_CBC_SHA",
+ "TLS_DH_anon_WITH_AES_256_CBC_SHA",
+ "TLS_RSA_WITH_NULL_SHA256",
+ "TLS_RSA_WITH_AES_128_CBC_SHA256",
+ "TLS_RSA_WITH_AES_256_CBC_SHA256",
+ "TLS_DH_DSS_WITH_AES_128_CBC_SHA256",
+ "TLS_DH_RSA_WITH_AES_128_CBC_SHA256",
+ "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256",
+ "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA",
+ "TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA",
+ "TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA",
+ "TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA",
+ "TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA",
+ "TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA",
+ "TLS_DHE_RSA_WITH_AES_128_CBC_SHA256",
+ "TLS_DH_DSS_WITH_AES_256_CBC_SHA256",
+ "TLS_DH_RSA_WITH_AES_256_CBC_SHA256",
+ "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256",
+ "TLS_DHE_RSA_WITH_AES_256_CBC_SHA256",
+ "TLS_DH_anon_WITH_AES_128_CBC_SHA256",
+ "TLS_DH_anon_WITH_AES_256_CBC_SHA256",
+ "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA",
+ "TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA",
+ "TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA",
+ "TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA",
+ "TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA",
+ "TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA",
+ "TLS_PSK_WITH_RC4_128_SHA",
+ "TLS_PSK_WITH_3DES_EDE_CBC_SHA",
+ "TLS_PSK_WITH_AES_128_CBC_SHA",
+ "TLS_PSK_WITH_AES_256_CBC_SHA",
+ "TLS_DHE_PSK_WITH_RC4_128_SHA",
+ "TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA",
+ "TLS_DHE_PSK_WITH_AES_128_CBC_SHA",
+ "TLS_DHE_PSK_WITH_AES_256_CBC_SHA",
+ "TLS_RSA_PSK_WITH_RC4_128_SHA",
+ "TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA",
+ "TLS_RSA_PSK_WITH_AES_128_CBC_SHA",
+ "TLS_RSA_PSK_WITH_AES_256_CBC_SHA",
+ "TLS_RSA_WITH_SEED_CBC_SHA",
+ "TLS_DH_DSS_WITH_SEED_CBC_SHA",
+ "TLS_DH_RSA_WITH_SEED_CBC_SHA",
+ "TLS_DHE_DSS_WITH_SEED_CBC_SHA",
+ "TLS_DHE_RSA_WITH_SEED_CBC_SHA",
+ "TLS_DH_anon_WITH_SEED_CBC_SHA",
+ "TLS_RSA_WITH_AES_128_GCM_SHA256",
+ "TLS_RSA_WITH_AES_256_GCM_SHA384",
+ "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256",
+ "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384",
+ "TLS_DH_RSA_WITH_AES_128_GCM_SHA256",
+ "TLS_DH_RSA_WITH_AES_256_GCM_SHA384",
+ "TLS_DHE_DSS_WITH_AES_128_GCM_SHA256",
+ "TLS_DHE_DSS_WITH_AES_256_GCM_SHA384",
+ "TLS_DH_DSS_WITH_AES_128_GCM_SHA256",
+ "TLS_DH_DSS_WITH_AES_256_GCM_SHA384",
+ "TLS_DH_anon_WITH_AES_128_GCM_SHA256",
+ "TLS_DH_anon_WITH_AES_256_GCM_SHA384",
+ "TLS_PSK_WITH_AES_128_GCM_SHA256",
+ "TLS_PSK_WITH_AES_256_GCM_SHA384",
+ "TLS_DHE_PSK_WITH_AES_128_GCM_SHA256",
+ "TLS_DHE_PSK_WITH_AES_256_GCM_SHA384",
+ "TLS_RSA_PSK_WITH_AES_128_GCM_SHA256",
+ "TLS_RSA_PSK_WITH_AES_256_GCM_SHA384",
+ "TLS_PSK_WITH_AES_128_CBC_SHA256",
+ "TLS_PSK_WITH_AES_256_CBC_SHA384",
+ "TLS_PSK_WITH_NULL_SHA256",
+ "TLS_PSK_WITH_NULL_SHA384",
+ "TLS_DHE_PSK_WITH_AES_128_CBC_SHA256",
+ "TLS_DHE_PSK_WITH_AES_256_CBC_SHA384",
+ "TLS_DHE_PSK_WITH_NULL_SHA256",
+ "TLS_DHE_PSK_WITH_NULL_SHA384",
+ "TLS_RSA_PSK_WITH_AES_128_CBC_SHA256",
+ "TLS_RSA_PSK_WITH_AES_256_CBC_SHA384",
+ "TLS_RSA_PSK_WITH_NULL_SHA256",
+ "TLS_RSA_PSK_WITH_NULL_SHA384",
+ "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256",
+ "TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256",
+ "TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256",
+ "TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256",
+ "TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256",
+ "TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256",
+ "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256",
+ "TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256",
+ "TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256",
+ "TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256",
+ "TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256",
+ "TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256",
+ "TLS_EMPTY_RENEGOTIATION_INFO_SCSV",
+ "TLS_ECDH_ECDSA_WITH_NULL_SHA",
+ "TLS_ECDH_ECDSA_WITH_RC4_128_SHA",
+ "TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA",
+ "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA",
+ "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA",
+ "TLS_ECDHE_ECDSA_WITH_NULL_SHA",
+ "TLS_ECDHE_ECDSA_WITH_RC4_128_SHA",
+ "TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA",
+ "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA",
+ "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA",
+ "TLS_ECDH_RSA_WITH_NULL_SHA",
+ "TLS_ECDH_RSA_WITH_RC4_128_SHA",
+ "TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA",
+ "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA",
+ "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA",
+ "TLS_ECDHE_RSA_WITH_NULL_SHA",
+ "TLS_ECDHE_RSA_WITH_RC4_128_SHA",
+ "TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA",
+ "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA",
+ "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA",
+ "TLS_ECDH_anon_WITH_NULL_SHA",
+ "TLS_ECDH_anon_WITH_RC4_128_SHA",
+ "TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA",
+ "TLS_ECDH_anon_WITH_AES_128_CBC_SHA",
+ "TLS_ECDH_anon_WITH_AES_256_CBC_SHA",
+ "TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA",
+ "TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA",
+ "TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA",
+ "TLS_SRP_SHA_WITH_AES_128_CBC_SHA",
+ "TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA",
+ "TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA",
+ "TLS_SRP_SHA_WITH_AES_256_CBC_SHA",
+ "TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA",
+ "TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA",
+ "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256",
+ "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384",
+ "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256",
+ "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384",
+ "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256",
+ "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384",
+ "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256",
+ "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384",
+ "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
+ "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
+ "TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256",
+ "TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384",
+ "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
+ "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
+ "TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256",
+ "TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384",
+ "TLS_ECDHE_PSK_WITH_RC4_128_SHA",
+ "TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA",
+ "TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA",
+ "TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA",
+ "TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256",
+ "TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384",
+ "TLS_ECDHE_PSK_WITH_NULL_SHA",
+ "TLS_ECDHE_PSK_WITH_NULL_SHA256",
+ "TLS_ECDHE_PSK_WITH_NULL_SHA384",
+ "TLS_RSA_WITH_ARIA_128_CBC_SHA256",
+ "TLS_RSA_WITH_ARIA_256_CBC_SHA384",
+ "TLS_DH_DSS_WITH_ARIA_128_CBC_SHA256",
+ "TLS_DH_DSS_WITH_ARIA_256_CBC_SHA384",
+ "TLS_DH_RSA_WITH_ARIA_128_CBC_SHA256",
+ "TLS_DH_RSA_WITH_ARIA_256_CBC_SHA384",
+ "TLS_DHE_DSS_WITH_ARIA_128_CBC_SHA256",
+ "TLS_DHE_DSS_WITH_ARIA_256_CBC_SHA384",
+ "TLS_DHE_RSA_WITH_ARIA_128_CBC_SHA256",
+ "TLS_DHE_RSA_WITH_ARIA_256_CBC_SHA384",
+ "TLS_DH_anon_WITH_ARIA_128_CBC_SHA256",
+ "TLS_DH_anon_WITH_ARIA_256_CBC_SHA384",
+ "TLS_ECDHE_ECDSA_WITH_ARIA_128_CBC_SHA256",
+ "TLS_ECDHE_ECDSA_WITH_ARIA_256_CBC_SHA384",
+ "TLS_ECDH_ECDSA_WITH_ARIA_128_CBC_SHA256",
+ "TLS_ECDH_ECDSA_WITH_ARIA_256_CBC_SHA384",
+ "TLS_ECDHE_RSA_WITH_ARIA_128_CBC_SHA256",
+ "TLS_ECDHE_RSA_WITH_ARIA_256_CBC_SHA384",
+ "TLS_ECDH_RSA_WITH_ARIA_128_CBC_SHA256",
+ "TLS_ECDH_RSA_WITH_ARIA_256_CBC_SHA384",
+ "TLS_RSA_WITH_ARIA_128_GCM_SHA256",
+ "TLS_RSA_WITH_ARIA_256_GCM_SHA384",
+ "TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256",
+ "TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384",
+ "TLS_DH_RSA_WITH_ARIA_128_GCM_SHA256",
+ "TLS_DH_RSA_WITH_ARIA_256_GCM_SHA384",
+ "TLS_DHE_DSS_WITH_ARIA_128_GCM_SHA256",
+ "TLS_DHE_DSS_WITH_ARIA_256_GCM_SHA384",
+ "TLS_DH_DSS_WITH_ARIA_128_GCM_SHA256",
+ "TLS_DH_DSS_WITH_ARIA_256_GCM_SHA384",
+ "TLS_DH_anon_WITH_ARIA_128_GCM_SHA256",
+ "TLS_DH_anon_WITH_ARIA_256_GCM_SHA384",
+ "TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256",
+ "TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384",
+ "TLS_ECDH_ECDSA_WITH_ARIA_128_GCM_SHA256",
+ "TLS_ECDH_ECDSA_WITH_ARIA_256_GCM_SHA384",
+ "TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256",
+ "TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384",
+ "TLS_ECDH_RSA_WITH_ARIA_128_GCM_SHA256",
+ "TLS_ECDH_RSA_WITH_ARIA_256_GCM_SHA384",
+ "TLS_PSK_WITH_ARIA_128_CBC_SHA256",
+ "TLS_PSK_WITH_ARIA_256_CBC_SHA384",
+ "TLS_DHE_PSK_WITH_ARIA_128_CBC_SHA256",
+ "TLS_DHE_PSK_WITH_ARIA_256_CBC_SHA384",
+ "TLS_RSA_PSK_WITH_ARIA_128_CBC_SHA256",
+ "TLS_RSA_PSK_WITH_ARIA_256_CBC_SHA384",
+ "TLS_PSK_WITH_ARIA_128_GCM_SHA256",
+ "TLS_PSK_WITH_ARIA_256_GCM_SHA384",
+ "TLS_DHE_PSK_WITH_ARIA_128_GCM_SHA256",
+ "TLS_DHE_PSK_WITH_ARIA_256_GCM_SHA384",
+ "TLS_RSA_PSK_WITH_ARIA_128_GCM_SHA256",
+ "TLS_RSA_PSK_WITH_ARIA_256_GCM_SHA384",
+ "TLS_ECDHE_PSK_WITH_ARIA_128_CBC_SHA256",
+ "TLS_ECDHE_PSK_WITH_ARIA_256_CBC_SHA384",
+ "TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256",
+ "TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384",
+ "TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256",
+ "TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384",
+ "TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256",
+ "TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384",
+ "TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256",
+ "TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384",
+ "TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256",
+ "TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384",
+ "TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256",
+ "TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384",
+ "TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256",
+ "TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384",
+ "TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256",
+ "TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384",
+ "TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256",
+ "TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384",
+ "TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256",
+ "TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384",
+ "TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256",
+ "TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384",
+ "TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256",
+ "TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384",
+ "TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256",
+ "TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384",
+ "TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256",
+ "TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384",
+ "TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256",
+ "TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384",
+ "TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256",
+ "TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384",
+ "TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256",
+ "TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384",
+ "TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256",
+ "TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384",
+ "TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256",
+ "TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384",
+ "TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256",
+ "TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384",
+ "TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256",
+ "TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384",
+ "TLS_RSA_WITH_AES_128_CCM",
+ "TLS_RSA_WITH_AES_256_CCM",
+ "TLS_DHE_RSA_WITH_AES_128_CCM",
+ "TLS_DHE_RSA_WITH_AES_256_CCM",
+ "TLS_RSA_WITH_AES_128_CCM_8",
+ "TLS_RSA_WITH_AES_256_CCM_8",
+ "TLS_DHE_RSA_WITH_AES_128_CCM_8",
+ "TLS_DHE_RSA_WITH_AES_256_CCM_8",
+ "TLS_PSK_WITH_AES_128_CCM",
+ "TLS_PSK_WITH_AES_256_CCM",
+ "TLS_DHE_PSK_WITH_AES_128_CCM",
+ "TLS_DHE_PSK_WITH_AES_256_CCM",
+ "TLS_PSK_WITH_AES_128_CCM_8",
+ "TLS_PSK_WITH_AES_256_CCM_8",
+ "TLS_PSK_DHE_WITH_AES_128_CCM_8",
+ "TLS_PSK_DHE_WITH_AES_256_CCM_8",
+ "TLS_ECDHE_ECDSA_WITH_AES_128_CCM",
+ "TLS_ECDHE_ECDSA_WITH_AES_256_CCM",
+ "TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8",
+ "TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8",
+ // From
https://tools.ietf.org/html/draft-ietf-tls-chacha20-poly1305-04
+ // These might change.
+ "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256",
+ "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256",
+ "TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256",
+ "TLS_PSK_WITH_CHACHA20_POLY1305_SHA256",
+ "TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256",
+ "TLS_DHE_PSK_WITH_CHACHA20_POLY1305_SHA256",
+ "TLS_RSA_PSK_WITH_CHACHA20_POLY1305_SHA256")));
}
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
