【SSL】如何查看各组件支持的TLS加密套件有哪些？

作者: Bogon | 来源:发表于2024-01-26 15:07 被阅读0次

客户端与服务器怎么交换加密套件?SSL/TLS握手过程?怎么协商
HTTPS中的SSL/TLS 和中间人攻击
利用SSL/TLS绕过web应用防火墙
SSL(安全套阶层)/TLS(传输层安全)
Redis Desktop Manager：Redis桌面管理工
iOS https
iOS https基于AF
TLS安全通信
Netty学习之内置处理器以及编解码器
HTTPS的访问过程

curl

curl 依赖于底层openssl

# curl --version
curl 7.79.1 (x86_64-openEuler-linux-gnu) libcurl/7.79.1 OpenSSL/1.1.1m-fips zlib/1.2.11 brotli/1.0.9 libidn2/2.3.2 libpsl/0.21.1 (+libidn2/2.3.2) libssh/0.9.6/openssl/zlib nghttp2/1.46.0 OpenLDAP/2.6.0
Release-Date: 2021-09-22
Protocols: dict file ftp ftps gopher gophers http https imap imaps ldap ldaps mqtt pop3 pop3s rtsp scp sftp smb smbs smtp smtps telnet tftp
Features: alt-svc AsynchDNS brotli GSS-API HSTS HTTP2 HTTPS-proxy IDN IPv6 Kerberos Largefile libz NTLM NTLM_WB PSL SPNEGO SSL TLS-SRP UnixSockets



# openssl ciphers -v |awk   '{printf "%-35s %-10s %-20s %-15s %-30s  %-15s\n", $1, $2, $3, $4, $5, $6}'
TLS_AES_256_GCM_SHA384              TLSv1.3    Kx=any               Au=any          Enc=AESGCM(256)                 Mac=AEAD
TLS_CHACHA20_POLY1305_SHA256        TLSv1.3    Kx=any               Au=any          Enc=CHACHA20/POLY1305(256)      Mac=AEAD
TLS_AES_128_GCM_SHA256              TLSv1.3    Kx=any               Au=any          Enc=AESGCM(128)                 Mac=AEAD
ECDHE-ECDSA-AES256-GCM-SHA384       TLSv1.2    Kx=ECDH              Au=ECDSA        Enc=AESGCM(256)                 Mac=AEAD
ECDHE-RSA-AES256-GCM-SHA384         TLSv1.2    Kx=ECDH              Au=RSA          Enc=AESGCM(256)                 Mac=AEAD
DHE-RSA-AES256-GCM-SHA384           TLSv1.2    Kx=DH                Au=RSA          Enc=AESGCM(256)                 Mac=AEAD
ECDHE-ECDSA-CHACHA20-POLY1305       TLSv1.2    Kx=ECDH              Au=ECDSA        Enc=CHACHA20/POLY1305(256)      Mac=AEAD
ECDHE-RSA-CHACHA20-POLY1305         TLSv1.2    Kx=ECDH              Au=RSA          Enc=CHACHA20/POLY1305(256)      Mac=AEAD
DHE-RSA-CHACHA20-POLY1305           TLSv1.2    Kx=DH                Au=RSA          Enc=CHACHA20/POLY1305(256)      Mac=AEAD
ECDHE-ECDSA-AES128-GCM-SHA256       TLSv1.2    Kx=ECDH              Au=ECDSA        Enc=AESGCM(128)                 Mac=AEAD
ECDHE-RSA-AES128-GCM-SHA256         TLSv1.2    Kx=ECDH              Au=RSA          Enc=AESGCM(128)                 Mac=AEAD
DHE-RSA-AES128-GCM-SHA256           TLSv1.2    Kx=DH                Au=RSA          Enc=AESGCM(128)                 Mac=AEAD
ECDHE-ECDSA-AES256-SHA384           TLSv1.2    Kx=ECDH              Au=ECDSA        Enc=AES(256)                    Mac=SHA384
ECDHE-RSA-AES256-SHA384             TLSv1.2    Kx=ECDH              Au=RSA          Enc=AES(256)                    Mac=SHA384
DHE-RSA-AES256-SHA256               TLSv1.2    Kx=DH                Au=RSA          Enc=AES(256)                    Mac=SHA256
ECDHE-ECDSA-AES128-SHA256           TLSv1.2    Kx=ECDH              Au=ECDSA        Enc=AES(128)                    Mac=SHA256
ECDHE-RSA-AES128-SHA256             TLSv1.2    Kx=ECDH              Au=RSA          Enc=AES(128)                    Mac=SHA256
DHE-RSA-AES128-SHA256               TLSv1.2    Kx=DH                Au=RSA          Enc=AES(128)                    Mac=SHA256
ECDHE-ECDSA-AES256-SHA              TLSv1      Kx=ECDH              Au=ECDSA        Enc=AES(256)                    Mac=SHA1
ECDHE-RSA-AES256-SHA                TLSv1      Kx=ECDH              Au=RSA          Enc=AES(256)                    Mac=SHA1
DHE-RSA-AES256-SHA                  SSLv3      Kx=DH                Au=RSA          Enc=AES(256)                    Mac=SHA1
ECDHE-ECDSA-AES128-SHA              TLSv1      Kx=ECDH              Au=ECDSA        Enc=AES(128)                    Mac=SHA1
ECDHE-RSA-AES128-SHA                TLSv1      Kx=ECDH              Au=RSA          Enc=AES(128)                    Mac=SHA1
DHE-RSA-AES128-SHA                  SSLv3      Kx=DH                Au=RSA          Enc=AES(128)                    Mac=SHA1
RSA-PSK-AES256-GCM-SHA384           TLSv1.2    Kx=RSAPSK            Au=RSA          Enc=AESGCM(256)                 Mac=AEAD
DHE-PSK-AES256-GCM-SHA384           TLSv1.2    Kx=DHEPSK            Au=PSK          Enc=AESGCM(256)                 Mac=AEAD
RSA-PSK-CHACHA20-POLY1305           TLSv1.2    Kx=RSAPSK            Au=RSA          Enc=CHACHA20/POLY1305(256)      Mac=AEAD
DHE-PSK-CHACHA20-POLY1305           TLSv1.2    Kx=DHEPSK            Au=PSK          Enc=CHACHA20/POLY1305(256)      Mac=AEAD
ECDHE-PSK-CHACHA20-POLY1305         TLSv1.2    Kx=ECDHEPSK          Au=PSK          Enc=CHACHA20/POLY1305(256)      Mac=AEAD
AES256-GCM-SHA384                   TLSv1.2    Kx=RSA               Au=RSA          Enc=AESGCM(256)                 Mac=AEAD
PSK-AES256-GCM-SHA384               TLSv1.2    Kx=PSK               Au=PSK          Enc=AESGCM(256)                 Mac=AEAD
PSK-CHACHA20-POLY1305               TLSv1.2    Kx=PSK               Au=PSK          Enc=CHACHA20/POLY1305(256)      Mac=AEAD
RSA-PSK-AES128-GCM-SHA256           TLSv1.2    Kx=RSAPSK            Au=RSA          Enc=AESGCM(128)                 Mac=AEAD
DHE-PSK-AES128-GCM-SHA256           TLSv1.2    Kx=DHEPSK            Au=PSK          Enc=AESGCM(128)                 Mac=AEAD
AES128-GCM-SHA256                   TLSv1.2    Kx=RSA               Au=RSA          Enc=AESGCM(128)                 Mac=AEAD
PSK-AES128-GCM-SHA256               TLSv1.2    Kx=PSK               Au=PSK          Enc=AESGCM(128)                 Mac=AEAD
AES256-SHA256                       TLSv1.2    Kx=RSA               Au=RSA          Enc=AES(256)                    Mac=SHA256
AES128-SHA256                       TLSv1.2    Kx=RSA               Au=RSA          Enc=AES(128)                    Mac=SHA256
ECDHE-PSK-AES256-CBC-SHA384         TLSv1      Kx=ECDHEPSK          Au=PSK          Enc=AES(256)                    Mac=SHA384
ECDHE-PSK-AES256-CBC-SHA            TLSv1      Kx=ECDHEPSK          Au=PSK          Enc=AES(256)                    Mac=SHA1
SRP-RSA-AES-256-CBC-SHA             SSLv3      Kx=SRP               Au=RSA          Enc=AES(256)                    Mac=SHA1
SRP-AES-256-CBC-SHA                 SSLv3      Kx=SRP               Au=SRP          Enc=AES(256)                    Mac=SHA1
RSA-PSK-AES256-CBC-SHA384           TLSv1      Kx=RSAPSK            Au=RSA          Enc=AES(256)                    Mac=SHA384
DHE-PSK-AES256-CBC-SHA384           TLSv1      Kx=DHEPSK            Au=PSK          Enc=AES(256)                    Mac=SHA384
RSA-PSK-AES256-CBC-SHA              SSLv3      Kx=RSAPSK            Au=RSA          Enc=AES(256)                    Mac=SHA1
DHE-PSK-AES256-CBC-SHA              SSLv3      Kx=DHEPSK            Au=PSK          Enc=AES(256)                    Mac=SHA1
AES256-SHA                          SSLv3      Kx=RSA               Au=RSA          Enc=AES(256)                    Mac=SHA1
PSK-AES256-CBC-SHA384               TLSv1      Kx=PSK               Au=PSK          Enc=AES(256)                    Mac=SHA384
PSK-AES256-CBC-SHA                  SSLv3      Kx=PSK               Au=PSK          Enc=AES(256)                    Mac=SHA1
ECDHE-PSK-AES128-CBC-SHA256         TLSv1      Kx=ECDHEPSK          Au=PSK          Enc=AES(128)                    Mac=SHA256
ECDHE-PSK-AES128-CBC-SHA            TLSv1      Kx=ECDHEPSK          Au=PSK          Enc=AES(128)                    Mac=SHA1
SRP-RSA-AES-128-CBC-SHA             SSLv3      Kx=SRP               Au=RSA          Enc=AES(128)                    Mac=SHA1
SRP-AES-128-CBC-SHA                 SSLv3      Kx=SRP               Au=SRP          Enc=AES(128)                    Mac=SHA1
RSA-PSK-AES128-CBC-SHA256           TLSv1      Kx=RSAPSK            Au=RSA          Enc=AES(128)                    Mac=SHA256
DHE-PSK-AES128-CBC-SHA256           TLSv1      Kx=DHEPSK            Au=PSK          Enc=AES(128)                    Mac=SHA256
RSA-PSK-AES128-CBC-SHA              SSLv3      Kx=RSAPSK            Au=RSA          Enc=AES(128)                    Mac=SHA1
DHE-PSK-AES128-CBC-SHA              SSLv3      Kx=DHEPSK            Au=PSK          Enc=AES(128)                    Mac=SHA1
AES128-SHA                          SSLv3      Kx=RSA               Au=RSA          Enc=AES(128)                    Mac=SHA1
PSK-AES128-CBC-SHA256               TLSv1      Kx=PSK               Au=PSK          Enc=AES(128)                    Mac=SHA256
PSK-AES128-CBC-SHA                  SSLv3      Kx=PSK               Au=PSK          Enc=AES(128)                    Mac=SHA1

# yum -y install nmap 

# nmap --script ssl-enum-ciphers -p 443 www.jianshu.com

Starting Nmap 7.92 ( https://nmap.org ) at 2024-01-27 17:31 CST
Nmap scan report for www.jianshu.com (39.98.74.233)
Host is up (0.031s latency).
Other addresses for www.jianshu.com (not scanned): 2408:4001:f30::221

PORT    STATE SERVICE
443/tcp open  https
| ssl-enum-ciphers:
|   TLSv1.0:
|     ciphers:
|       TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A
|       TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A
|       TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A
|       TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A
|       TLS_RSA_WITH_3DES_EDE_CBC_SHA (rsa 2048) - C
|     compressors:
|       NULL
|     cipher preference: server
|     warnings:
|       64-bit block cipher 3DES vulnerable to SWEET32 attack
|   TLSv1.1:
|     ciphers:
|       TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A
|       TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A
|       TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A
|       TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A
|       TLS_RSA_WITH_3DES_EDE_CBC_SHA (rsa 2048) - C
|     compressors:
|       NULL
|     cipher preference: server
|     warnings:
|       64-bit block cipher 3DES vulnerable to SWEET32 attack
|   TLSv1.2:
|     ciphers:
|       TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A
|       TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A
|       TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A
|       TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (ecdh_x25519) - A
|       TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A
|       TLS_RSA_WITH_AES_256_GCM_SHA384 (rsa 2048) - A
|       TLS_RSA_WITH_AES_128_CBC_SHA256 (rsa 2048) - A
|       TLS_RSA_WITH_AES_256_CBC_SHA256 (rsa 2048) - A
|       TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A
|       TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A
|       TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A
|       TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A
|       TLS_RSA_WITH_3DES_EDE_CBC_SHA (rsa 2048) - C
|     compressors:
|       NULL
|     cipher preference: server
|     warnings:
|       64-bit block cipher 3DES vulnerable to SWEET32 attack
|_  least strength: C

Nmap done: 1 IP address (1 host up) scanned in 8.58 seconds

# curl -sSL  -vv https://www.jianshu.com
*   Trying 39.98.74.233:443...
* Connected to www.jianshu.com (39.98.74.233) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*  CAfile: /etc/pki/tls/certs/ca-bundle.crt
*  CApath: none
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-RSA-AES128-GCM-SHA256
* ALPN, server accepted to use h2
* Server certificate:
*  subject: CN=*.jianshu.com
*  start date: Oct 11 00:00:00 2023 GMT
*  expire date: Oct 10 23:59:59 2024 GMT
*  subjectAltName: host "www.jianshu.com" matched cert's "*.jianshu.com"
*  issuer: C=US; O=DigiCert Inc; OU=www.digicert.com; CN=Encryption Everywhere DV TLS CA - G1
*  SSL certificate verify ok.
* Using HTTP2, server supports multiplexing
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
* Using Stream ID: 1 (easy handle 0x55e94b438d40)
> GET / HTTP/2
> Host: www.jianshu.com
> user-agent: curl/7.79.1
> accept: */*
>
* Connection state changed (MAX_CONCURRENT_STREAMS == 128)!
< HTTP/2 200
< date: Sat, 27 Jan 2024 09:29:14 GMT
< content-type: text/html; charset=utf-8
< vary: Accept-Encoding
< vary: Accept-Encoding
< x-frame-options: SAMEORIGIN
< x-xss-protection: 1; mode=block
< x-content-type-options: nosniff
< etag: W/"bccab9d11e7266d1926e32682f395b13"
< cache-control: max-age=0, private, must-revalidate
< set-cookie: locale=zh-CN; path=/
< x-request-id: c22c221c-7946-4b85-bccb-2f9648cce19f
< x-runtime: 0.003518
< strict-transport-security: max-age=31536000; includeSubDomains; preload

nginx

# /usr/local/openresty/nginx/sbin/nginx  -V
nginx version: openresty/1.21.4.2
built by gcc 10.3.1 (GCC)
built with OpenSSL 1.1.1v  1 Aug 2023
TLS SNI support enabled

# cat /usr/local/openresty/nginx/conf/nginx.conf | grep ssl_protocols
        ssl_protocols TLSv1.2 TLSv1.3;


# cat /usr/local/openresty/nginx/conf/nginx.conf | grep ssl_ciphers
        ssl_ciphers 'TLS_AES_256_GCM_SHA384:TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA512:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA';


# cat /usr/local/openresty/nginx/conf/nginx.conf | grep ssl_ciphers | grep -v '^#' | awk '{print $2}' | sed  "s/'//g" | sed "s/;//g" |tr ':' '\n'
TLS_AES_256_GCM_SHA384
TLS_AES_128_GCM_SHA256
TLS_CHACHA20_POLY1305_SHA256
ECDHE-ECDSA-CHACHA20-POLY1305
ECDHE-ECDSA-AES256-GCM-SHA512
ECDHE-ECDSA-AES256-GCM-SHA384
ECDHE-ECDSA-AES128-GCM-SHA256
ECDHE-ECDSA-AES256-SHA384
ECDHE-ECDSA-AES128-SHA256
ECDHE-ECDSA-AES256-SHA
ECDHE-ECDSA-AES128-SHA
ECDHE-RSA-CHACHA20-POLY1305
ECDHE-RSA-AES256-GCM-SHA512
ECDHE-RSA-AES256-GCM-SHA384
ECDHE-RSA-AES128-GCM-SHA256
ECDHE-RSA-AES256-SHA384
ECDHE-RSA-AES128-SHA256
ECDHE-RSA-AES256-SHA
ECDHE-RSA-AES128-SHA

JAVA(JDK/JRE)

# java -version
java version "1.8.0_112"
Java(TM) SE Runtime Environment (build 1.8.0_112-b15)
Java HotSpot(TM) 64-Bit Server VM (build 25.112-b15, mixed mode)


#  bin/jrunscript  -e "print(java.util.Arrays.toString(javax.net.ssl.SSLServerSocketFactory.getDefault().getSupportedCipherSuites()))"

[TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA, TLS_EMPTY_RENEGOTIATION_INFO_SCSV, TLS_DH_anon_WITH_AES_128_GCM_SHA256, TLS_DH_anon_WITH_AES_128_CBC_SHA256, TLS_ECDH_anon_WITH_AES_128_CBC_SHA, TLS_DH_anon_WITH_AES_128_CBC_SHA, TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA, SSL_DH_anon_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_DES_CBC_SHA, SSL_DHE_RSA_WITH_DES_CBC_SHA, SSL_DHE_DSS_WITH_DES_CBC_SHA, SSL_DH_anon_WITH_DES_CBC_SHA, SSL_RSA_EXPORT_WITH_DES40_CBC_SHA, SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA, SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA, SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA, TLS_RSA_WITH_NULL_SHA256, TLS_ECDHE_ECDSA_WITH_NULL_SHA, TLS_ECDHE_RSA_WITH_NULL_SHA, SSL_RSA_WITH_NULL_SHA, TLS_ECDH_ECDSA_WITH_NULL_SHA, TLS_ECDH_RSA_WITH_NULL_SHA, TLS_ECDH_anon_WITH_NULL_SHA, SSL_RSA_WITH_NULL_MD5, TLS_KRB5_WITH_3DES_EDE_CBC_SHA, TLS_KRB5_WITH_3DES_EDE_CBC_MD5, TLS_KRB5_WITH_DES_CBC_SHA, TLS_KRB5_WITH_DES_CBC_MD5, TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA, TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5]


# bin/jrunscript -e "print(java.util.Arrays.toString(javax.net.ssl.SSLServerSocketFactory.getDefault().getSupportedCipherSuites()).replace('[', '').replace(']', ''))" |  tr  ',' '\n'

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
 TLS_RSA_WITH_AES_128_CBC_SHA256
 TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256
 TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256
 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
 TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
 TLS_RSA_WITH_AES_128_CBC_SHA
 TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA
 TLS_ECDH_RSA_WITH_AES_128_CBC_SHA
 TLS_DHE_RSA_WITH_AES_128_CBC_SHA
 TLS_DHE_DSS_WITH_AES_128_CBC_SHA
 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
 TLS_RSA_WITH_AES_128_GCM_SHA256
 TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
 TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
 TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
 TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA
 TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
 SSL_RSA_WITH_3DES_EDE_CBC_SHA
 TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA
 TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA
 SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
 SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA
 TLS_EMPTY_RENEGOTIATION_INFO_SCSV
 TLS_DH_anon_WITH_AES_128_GCM_SHA256
 TLS_DH_anon_WITH_AES_128_CBC_SHA256
 TLS_ECDH_anon_WITH_AES_128_CBC_SHA
 TLS_DH_anon_WITH_AES_128_CBC_SHA
 TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA
 SSL_DH_anon_WITH_3DES_EDE_CBC_SHA
 SSL_RSA_WITH_DES_CBC_SHA
 SSL_DHE_RSA_WITH_DES_CBC_SHA
 SSL_DHE_DSS_WITH_DES_CBC_SHA
 SSL_DH_anon_WITH_DES_CBC_SHA
 SSL_RSA_EXPORT_WITH_DES40_CBC_SHA
 SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA
 SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA
 SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA
 TLS_RSA_WITH_NULL_SHA256
 TLS_ECDHE_ECDSA_WITH_NULL_SHA
 TLS_ECDHE_RSA_WITH_NULL_SHA
 SSL_RSA_WITH_NULL_SHA
 TLS_ECDH_ECDSA_WITH_NULL_SHA
 TLS_ECDH_RSA_WITH_NULL_SHA
 TLS_ECDH_anon_WITH_NULL_SHA
 SSL_RSA_WITH_NULL_MD5
 TLS_KRB5_WITH_3DES_EDE_CBC_SHA
 TLS_KRB5_WITH_3DES_EDE_CBC_MD5
 TLS_KRB5_WITH_DES_CBC_SHA
 TLS_KRB5_WITH_DES_CBC_MD5
 TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA
 TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5

客户端与服务器怎么交换加密套件?SSL/TLS握手过程?怎么协商
双方在SSL/TLS协议握手过程中协商加密套件。SSL/TLS协议基本过程：客户端向服务器端索要并验证公钥双方...
HTTPS中的SSL/TLS 和中间人攻击
Q：Https == http + SSL/TLS 那中间ssl 加密的过程？Q：SSL/TLS 就完全安全吗？ ...
利用SSL/TLS绕过web应用防火墙
众所周知的SSL/TLS握手过程：如上图1所示，server和client之间需要协商加密套件，如果client...
SSL(安全套阶层)/TLS(传输层安全)
SSL/TLS协议运行机制的概述图解SSL/TLS协议HTTPS背后的加密算法TLS协议分析与现代加密通信协议...
Redis Desktop Manager：Redis桌面管理工
Redis Desktop Manager是一款非常实用的Redis可视化工具。RDM支持SSL / TLS加密，...
iOS https
HTTPS协议 1. 作用学名SSL/ TLS 协议，不使用SSL/TLS的HTTP通信，就是不加密的通信。所...
iOS https基于AF
想要搞懂https首先你要知道ssl/tls什么是ssl/tls?SSL利用数据加密、身份验证和消息完整性验证机制...
TLS安全通信
什么是TLS TLS其实是SSL，可能更正式的说法已经不用SSL了。TLS是一套基于非对称加密算法的安全传输协议，...
Netty学习之内置处理器以及编解码器
Netty学习之内置处理器以及编解码器前言 SSL/TLS SSL/TLS是目前广泛使用的加密，位于TCP之上，...
HTTPS的访问过程
SSL/TLS是加密传输的协议1、浏览器将自己支持的加密规则发送给网站2、网站选出一组加密算法和HASH算法，并将...