Git
/
testssl.sh
mirror of https://github.com/drwetter/testssl.sh.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
testssl.sh/etc/client-simulation.txt

2467 lines
170 KiB
Plaintext
Raw Normal View History

rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
#!/usr/bin/env bash
# This file contains client handshake data used in the run_client_simulation function
# Don't update this file by hand, but run util/update_client_sim_data.pl instead.
# The one currently distributed with testssl.sh (etc/client-simulation.txt) has been generated
# from this script and manually edited (=which UA to show up) and sorted.
# Most clients are taken from Qualys SSL Labs --- From: https://api.dev.ssllabs.com/api/v3/getClients
names+=("Android 2.3.7")
short+=("android_237")
ciphers+=("RC4-MD5:RC4-SHA:AES128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DES-CBC-SHA:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:EXP-RC4-MD5:EXP-DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("")
warning+=("")
handshakebytes+=("160301004b010000470301531f3de6b36804738bbb94a6ecd570a544789c3bb0a6ef8b9d702f997d928d4b00002000040005002f00330032000a00160013000900150012000300080014001100ff0100")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("Android 4.0.4")
short+=("android_404")
ciphers+=("ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-AES128-SHA:ECDH-ECDSA-AES128-SHA:AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100c6010000c20301531f479cc7785f455ca7a70142af5be929c1ba931eedbf46dba6b6638da75e95000038c014c00a00390038c00fc0050035c012c00800160013c00dc003000ac013c00900330032c00ec004002fc011c007c00cc0020005000400ff020100006000000014001200000f7777772e73736c6c6162732e636f6d000b000403000102000a00340032000100020003000400050006000700080009000a000b000c000d000e000f00100011001200130014001500160017001800190023000033740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("sect163k1:sect163r1:sect163r2:sect193r1:sect193r2:sect233k1:sect233r1:sect239k1:sect283k1:sect283r1:sect409k1:sect409r1:sect571k1:sect571r1:secp160k1:secp160r1:secp160r2:secp192k1:prime192v1:secp224k1:secp224r1:secp256k1:prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Android 4.1.1")
short+=("android_411")
ciphers+=("ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:SRP-DSS-AES-256-CBC-SHA:SRP-RSA-AES-256-CBC-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:SRP-DSS-3DES-EDE-CBC-SHA:SRP-RSA-3DES-EDE-CBC-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:SRP-DSS-AES-128-CBC-SHA:SRP-RSA-AES-128-CBC-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-AES128-SHA:ECDH-ECDSA-AES128-SHA:AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100d7010000d30301531f3f6dd9eb5f6b3586c628cc2cdc82cdb259b1a096237ba4df30dbbc0f26fb000044c014c00ac022c02100390038c00fc0050035c012c008c01cc01b00160013c00dc003000ac013c009c01fc01e00330032c00ec004002fc011c007c00cc0020005000400ff020100006500000014001200000f7777772e73736c6c6162732e636f6d000b000403000102000a00340032000e000d0019000b000c00180009000a00160017000800060007001400150004000500120013000100020003000f0010001100230000000f00010133740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("sect571r1:sect571k1:secp521r1:sect409k1:sect409r1:secp384r1:sect283k1:sect283r1:secp256k1:prime256v1:sect239k1:sect233k1:sect233r1:secp224k1:secp224r1:sect193r1:sect193r2:secp192k1:prime192v1:sect163k1:sect163r1:sect163r2:secp160k1:secp160r1:secp160r2")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("Android 4.2.2")
short+=("android_422")
ciphers+=("ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:SRP-DSS-AES-256-CBC-SHA:SRP-RSA-AES-256-CBC-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:SRP-DSS-3DES-EDE-CBC-SHA:SRP-RSA-3DES-EDE-CBC-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:SRP-DSS-AES-128-CBC-SHA:SRP-RSA-AES-128-CBC-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-AES128-SHA:ECDH-ECDSA-AES128-SHA:AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100d1010000cd0301531f40a89e11d5681f563f3dad094375227035d4e9d2c1654d7d3954e3254558000044c014c00ac022c02100390038c00fc0050035c012c008c01cc01b00160013c00dc003000ac013c009c01fc01e00330032c00ec004002fc011c007c00cc0020005000400ff0100006000000014001200000f7777772e73736c6c6162732e636f6d000b000403000102000a00340032000e000d0019000b000c00180009000a00160017000800060007001400150004000500120013000100020003000f001000110023000033740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("sect571r1:sect571k1:secp521r1:sect409k1:sect409r1:secp384r1:sect283k1:sect283r1:secp256k1:prime256v1:sect239k1:sect233k1:sect233r1:secp224k1:secp224r1:sect193r1:sect193r2:secp192k1:prime192v1:sect163k1:sect163r1:sect163r2:secp160k1:secp160r1:secp160r2")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Android 4.3")
short+=("android_43")
ciphers+=("ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:SRP-DSS-AES-256-CBC-SHA:SRP-RSA-AES-256-CBC-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:SRP-DSS-3DES-EDE-CBC-SHA:SRP-RSA-3DES-EDE-CBC-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:SRP-DSS-AES-128-CBC-SHA:SRP-RSA-AES-128-CBC-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-AES128-SHA:ECDH-ECDSA-AES128-SHA:AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100d1010000cd0301531f41c3c5110dd688458e5e48e06d30814572ad7b8f9d9df1b0a8820b270685000044c014c00ac022c02100390038c00fc0050035c012c008c01cc01b00160013c00dc003000ac013c009c01fc01e00330032c00ec004002fc011c007c00cc0020005000400ff0100006000000014001200000f7777772e73736c6c6162732e636f6d000b000403000102000a00340032000e000d0019000b000c00180009000a00160017000800060007001400150004000500120013000100020003000f001000110023000033740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("sect571r1:sect571k1:secp521r1:sect409k1:sect409r1:secp384r1:sect283k1:sect283r1:secp256k1:prime256v1:sect239k1:sect233k1:sect233r1:secp224k1:secp224r1:sect193r1:sect193r2:secp192k1:prime192v1:sect163k1:sect163r1:sect163r2:secp160k1:secp160r1:secp160r2")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("Android 4.4.2")
short+=("android_442")
ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-DSS-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA256:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256-GCM-SHA384:AES256-SHA256:AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:DHE-DSS-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:AES128-GCM-SHA256:AES128-SHA256:AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100d1010000cd0303531f4317998fb70d57feded18c14433a1b665f963f7e3b1b045b6cc3d61bf21300004cc030c02cc014c00a00a3009f006b006a00390038009d003d0035c012c00800160013000ac02fc02bc027c023c013c00900a2009e0067004000330032009c003c002fc011c0070005000400ff0100005800000014001200000f7777772e73736c6c6162732e636f6d000b00020100000a0008000600190018001700230000000d00220020060106020603050105020503040104020403030103020303020102020203010133740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("secp521r1:secp384r1:prime256v1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("Android 5.0.0")
short+=("android_500")
ciphers+=("ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:DHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:DHE-DSS-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:AES128-GCM-SHA256:AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100bd010000b9030354c21737f3d9d10696c91debf12415f9c45833a83cfbbd4c60c9b91407d2316b000038cc14cc13cc15c014c00a003900380035c012c00800160013000ac02fc02bc013c00900a2009e00330032009c002fc011c0070005000400ff0100005800000014001200000f6465762e73736c6c6162732e636f6d00230000000d00220020060106020603050105020503040104020403030103020303020102020203010133740000000b00020100000a00080006001900180017")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("secp521r1:secp384r1:prime256v1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("Android 6.0")
short+=("android_60")
ciphers+=("ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:DHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:AES128-GCM-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100e2010000de030352f98411589cd6cd9dd403e70b1685b464a1d8c7495214d2c29b557738599f3420706946c402bf34b6356bfa5979bc3c65e1979a8fc632c201e976fef1ec3d55870022cc14cc13cc15c02bc02f009ec00ac0140039c009c0130033009c0035002f000a00ff0100007300000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d001600140601060305010503040104030301030302010203000500050100000000337400000012000000100014001208687474702f312e3108737064792f332e31000b00020100000a0006000400170018")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("Android 7.0")
short+=("android_70")
ciphers+=("ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100e4010000e0030366285fd01ec41e6b9c032a373d4607a6349c509d8a1b142cecc6820364d6eab42024c69f1c56165106d550c4c72135be8c3fe21f72843d19e663602d6476babc090022cca9cca8cc14cc13c02bc02fc02cc030c009c013c00ac014009c009d002f0035000a01000075ff0100010000000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d00120010060106030501050304010403020102030005000501000000000012000000100017001502683208737064792f332e3108687474702f312e31000b00020100000a00080006001d00170018")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("X25519:prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("Chrome 27 Win 7")
short+=("chrome_27_win7")
ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:CAMELLIA256-SHA:AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:DHE-DSS-RC4-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-AES128-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-AES128-SHA:SEED-SHA:CAMELLIA128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100b9010000b5030251d1589cbb4af03c585fadf8741670b304c96b6b9cd67a9972f2f117199994ee000048c00ac0140088008700390038c00fc00500840035c007c009c011c01300450044006600330032c00cc00ec002c0040096004100050004002fc008c01200160013c00dc003feff000a0100004400000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000754f0000000500050100000000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_ssl2")
tlsvers+=("-tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0302")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 28 Win 7")
short+=("chrome_28_win7")
ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:CAMELLIA256-SHA:AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:DHE-DSS-RC4-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-AES128-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-AES128-SHA:SEED-SHA:CAMELLIA128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100b9010000b5030251fa2a84056d23d8eda90a57fa8fce1fdca180e4b63f78792ea67f3c0abfe2d4000048c00ac0140088008700390038c00fc00500840035c007c009c011c01300450044006600330032c00cc00ec002c0040096004100050004002fc008c01200160013c00dc003feff000a0100004400000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000754f0000000500050100000000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_ssl2")
tlsvers+=("-tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0302")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 29 Win 7")
short+=("chrome_29_win7")
ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA256:AES256-SHA:AES256-SHA256:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:AES128-SHA256:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100900100008c030252417a5a280a06236420ca1a916bd1a4a0ca397d0908a11db51dd12d066ce245000028c00ac0140039006b0035003dc007c009c023c011c013c02700330067003200050004002f003c000a0100003b00000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000754f0000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_ssl2")
tlsvers+=("-tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0302")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 30 Win 7")
short+=("chrome_30_win7")
ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA256:AES256-SHA:AES256-SHA256:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:AES128-SHA256:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100d5010000d10303524d3fba0440d42fbbb01d702ba9c041d2fc697f83288c1713d98204266c6dc3000028c00ac0140039006b0035003dc007c009c023c011c013c02700330067003200050004002f003c000a0100008000000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b00020100002300003374000000100022002006737064792f3206737064792f3308737064792f332e3108687474702f312e31754f0000000500050100000000000d0012001004010501020104030503020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 31 Win 7")
short+=("chrome_31_win7")
ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100d1010000cd03035289e11a35cdb85cdc0b754c295ad207ca69931bc1a24b7fac2bf505beeb07a3000024c02bc02f009e009cc00ac01400390035c007c009c011c0130033003200050004002f000a0100008000000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b00020100002300003374000000100022002006737064792f3206737064792f3308737064792f332e3108687474702f312e31754f0000000500050100000000000d0012001004010501020104030503020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 32 Win 7")
short+=("chrome_32_win7")
ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100d1010000cd030352dd2a2fa57a2b28556990f7a165d98ee6db68a58e3fe03a63f1e49660f683da000024c02bc02f009e009cc00ac01400390035c007c009c011c0130033003200050004002f000a0100008000000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b00020100002300003374000000100022002006737064792f3206737064792f3308737064792f332e3108687474702f312e31754f0000000500050100000000000d0012001004010501020104030503020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 33 Win 7")
short+=("chrome_33_win7")
ciphers+=("ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100d2010000ce030353199d5b3e169e9dde7fa14fd1338ade91887c70040e39117dc261b29de21852000028cc14cc13c02bc02f009e009cc00ac01400390035c007c009c011c0130033003200050004002f000a0100007d00000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b0002010000230000337400000010001b001906737064792f3308737064792f332e3108687474702f312e3175500000000500050100000000000d001200100401050102010403050302030402020200120000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 34 OS X")
short+=("chrome_34_osx")
ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100d2010000ce0303e4165a3865ece64acaa5f86ffaf810f345cd516c25688f191d0356f175f9e2c5000028c02bc02f009ecc14cc13c00ac009c013c014c007c011003300320039009c002f0035000a000500040100007d00000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b0002010000230000337400000010001b001906737064792f3308737064792f332e3108687474702f312e3175500000000500050100000000000d001200100401050102010403050302030402020200120000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 35 Win 7")
short+=("chrome_35_win7")
ciphers+=("ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100d2010000ce03032cb92528d05b1cf32e6b5384a7d39ddf0908f656e4572520c5bac4bf96621434000028cc14cc13c02bc02f009ec00ac009c013c014c007c011003300320039009c002f0035000a000500040100007d00000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b0002010000230000337400000010001b001906737064792f3308737064792f332e3108687474702f312e3175500000000500050100000000000d001200100401050102010403050302030402020200120000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 36 Win 7")
short+=("chrome_36_win7")
ciphers+=("ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100d2010000ce03032466f5db5320e055ed5aad2d86eccf3a9b4d07e1b1cdce8cb86c635d45c8449a000028cc14cc13c02bc02f009ec00ac009c013c014c007c011003300320039009c002f0035000a000500040100007d00000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b0002010000230000337400000010001b001906737064792f3308737064792f332e3108687474702f312e317550000000050005010000000000120000000d0012001004010501020104030503020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 37 OS X")
short+=("chrome_37_osx")
ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100d2010000ce0303a210a65d166b4f98899fe70b3ab274c941fab765b91fa37f77dde1844a9721c9000028c02bc02f009ecc14cc13c00ac009c013c014c007c011003300320039009c002f0035000a000500040100007d00000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b0002010000230000337400000010001b001906737064792f3308737064792f332e3108687474702f312e317550000000050005010000000000120000000d0012001004010501020104030503020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 39 OS X")
short+=("chrome_39_osx")
ciphers+=("ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:DHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:AES128-GCM-SHA256:AES256-SHA:AES128-SHA:RC4-SHA:RC4-MD5:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100d3010000cf0303b7fa18a5509607700fb70acc290b717322d66bfc899a662b2746e1741cf4e74000002ac02fc02b009ecc14cc13cc15c014c00a0039c013c0090033c011c007009c0035002f00050004000a00ff0100007c00000014001200000f6465762e73736c6c6162732e636f6d00230000000d00160014060106030501050304010403030103030201020300050005010000000033740000001200000010001b001908687474702f312e3106737064792f3308737064792f332e3175500000000b00020100000a00080006001700180019")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 40 OS X")
short+=("chrome_40_osx")
ciphers+=("ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:DHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:AES128-GCM-SHA256:AES256-SHA:AES128-SHA:RC4-SHA:RC4-MD5:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100d0010000cc030377d43ab02ced3617a218bb7313d9f271111f4d4f92b2d4d532e79c243ba0221500002ac02fc02b009ecc14cc13cc15c014c00a0039c013c0090033c011c007009c0035002f00050004000a00ff0100007900000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d001600140601060305010503040104030301030302010203000500050100000000337400000012000000100014001208687474702f312e3108737064792f332e3175500000000b00020100000a00080006001700180019")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 42 OS X")
short+=("chrome_42_osx")
ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:DHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:AES128-GCM-SHA256:AES256-SHA:AES128-SHA:RC4-SHA:RC4-MD5:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100d4010000d0030387a11416629548eab673e8e89c34252810ae36dd940f1649e67a8cb34655e1e700002ac02bc02f009ecc14cc13cc15c00ac0140039c009c0130033c007c011009c0035002f00050004000a00ff0100007d00000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d00160014060106030501050304010403030103030201020300050005010000000033740000001200000010001a001808687474702f312e3108737064792f332e310568322d313475500000000b00020100000a0006000400170018")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(4096)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 43 OS X")
short+=("chrome_43_osx")
ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:DHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:AES128-GCM-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100cf010000cb03033d87f93d7c4c1b021da6c5e2e9fe02ec0aee76ede29835ffb55c28571933c60b000022c02bc02f009ecc14cc13cc15c00ac0140039c009c0130033009c0035002f000a00ff0100008000000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d00160014060106030501050304010403030103030201020300050005010000000033740000001200000010001d001b08687474702f312e3108737064792f332e310568322d313402683275500000000b00020100000a0006000400170018")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(4096)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 45 OS X")
short+=("chrome_45_osx")
ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:DHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:AES128-GCM-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100cf010000cb0303ee7b22a8ec3bbae266ee164ca54dbff70de23513d137fc78ba7ef975763312dc000022c02bc02f009ecc14cc13cc15c00ac0140039c009c0130033009c0035002f000a00ff0100008000000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d00160014060106030501050304010403030103030201020300050005010000000033740000001200000010001d001b08687474702f312e3108737064792f332e310568322d313402683275500000000b00020100000a0006000400170018")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(8192)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 47 OS X")
short+=("chrome_47_osx")
ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:AES128-GCM-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100ca010000c6030361f8858af23cda649baf596105ec66bfe5b4642046c486e3e5321b26588392f400001ec02bc02f009ecc14cc13c00ac0140039c009c0130033009c0035002f000a0100007fff0100010000000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d001600140601060305010503040104030301030302010203000500050100000000337400000012000000100017001508687474702f312e3108737064792f332e3102683275500000000b00020100000a0006000400170018")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(8192)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 48 OS X")
short+=("chrome_48_osx")
ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:AES128-GCM-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100ca010000c603037ac82baca9c0d08b1a01ecfb0bf5824f195153e0c6b4b48f5bf4621846376e8a00001ec02bc02f009ecc14cc13c00ac0140039c009c0130033009c0035002f000a0100007fff0100010000000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d001600140601060305010503040104030301030302010203000500050100000000337400000012000000100017001502683208737064792f332e3108687474702f312e3175500000000b00020100000a0006000400170018")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(8192)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 49 Win 7")
short+=("chrome_49_win7")
ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:AES128-GCM-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100c8010000c40303699c8a4e3834651e3cfcb22fa744ce5ce607e584a16f527d30f8af8a4dbea42100001cc02bc02fcca9cca8cc14cc13c00ac014c009c013009c0035002f000a0100007fff0100010000000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d001600140601060305010503040104030301030302010203000500050100000000337400000012000000100017001502683208737064792f332e3108687474702f312e3175500000000b00020100000a0006000400170018")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 49 XP SP3")
short+=("chrome_49_xpsp3")
ciphers+=("ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:AES128-GCM-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100be010000ba03030405d478d0c0c15c089a01050e9a0286170de6d8766ec3d07d8ae27cf44abbd9000012c02fcca8cc13c014c013009c0035002f000a0100007fff0100010000000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d001600140601060305010503040104030301030302010203000500050100000000337400000012000000100017001502683208737064792f332e3108687474702f312e3175500000000b00020100000a0006000400170018")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 50 Win 7")
short+=("chrome_50_win7")
ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:AES128-GCM-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100c6010000c20303ff4e7eb1ce359979138cc297b9911c45cd06b1928e4356132844309a471c3c9700001cc02bc02fcca9cca8cc14cc13c00ac014c009c013009c0035002f000a0100007dff0100010000000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d0012001006010603050105030401040302010203000500050100000000337400000012000000100017001502683208737064792f332e3108687474702f312e3175500000000b00020100000a00080006001d00170018")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("X25519:prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 51 Win 7")
short+=("chrome_51_win7")
ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100bf010000bb030355079db3b53ce2a6d3335902717ae6a84cc4b855d0b68775ac287f38da343c55000022c02bc02fc02cc030cca9cca8cc14cc13c009c013c00ac014009c009d002f0035000a01000070ff0100010000000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d0012001006010603050105030401040302010203000500050100000000001200000010000e000c02683208687474702f312e3175500000000b00020100000a00080006001d00170018")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("X25519:prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("Chrome 57 Win 7")
short+=("chrome_57_win7")
ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("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")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
Fix incorrect client simulation data In the data provided by https://api.dev.ssllabs.com/api/v3/getClients, Chrome 57 Win 7 and Firefox 53 Win 7 send ClientHellos that indicate support for TLSv1.3 draft 18, but the highest_protocol for each of these is specified as 0x0303. The result is that if the server being tested supports TLSV1.3 draft 18, `run_client_simulation()` will incorrectly report "No connection" for these servers since the DETECTED_TLS_VERSION (0x0304) will be higher than the specified highest_protocol. This PR fixes the problem by changing the highest_protocol to 0x0304. Note that another solution to this problem would be to change the ClientHello messages for these two browsers. It is my understanding that TLSv1.3 is disabled by default for these browsers, so presumably the ClientHello messages would not specify TLSv1.3 support if they were configured with TLSv1.3 support disabled.
2017-10-03 22:34:56 +02:00
highest_protocol+=("0x0304")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("X25519:prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("Firefox 10.0.12 ESR Win 7")
short+=("firefox_10012_esr_win7")
ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:CAMELLIA256-SHA:AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-AES128-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-AES128-SHA:SEED-SHA:CAMELLIA128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100a30100009f030151fa38b87e68fb3b8c0fb02f6c7142e53e4fcb69cdd10296088ecc001e9bcebc00004800ffc00ac0140088008700390038c00fc00500840035c007c009c011c0130045004400330032c00cc00ec002c0040096004100050004002fc008c01200160013c00dc003feff000a0100002e00000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b0002010000230000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 17.0.7 ESR Win 7")
short+=("firefox_1707_esr_win7")
ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:CAMELLIA256-SHA:AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-AES128-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-AES128-SHA:SEED-SHA:CAMELLIA128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100a7010000a3030151fa3041dd8c81c89fd6434776d3c39f3b8305fb116a567e219054e63b8e21a000004800ffc00ac0140088008700390038c00fc00500840035c007c009c011c0130045004400330032c00cc00ec002c0040096004100050004002fc008c01200160013c00dc003feff000a0100003200000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b000201000023000033740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 21 Fedora 19")
short+=("firefox_21_fedora19")
ciphers+=("DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:CAMELLIA256-SHA:AES256-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:SEED-SHA:CAMELLIA128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100b3010000af030151fa34e8a9deb1b23f2cae528c633c4ac28931d1afb8b01215bc2980ed312a5a00002800ff00880087003900380084003500450044003300320096004100050004002f00160013feff000a0100005e00000014001200000f7777772e73736c6c6162732e636f6d000a00340032000100020003000400050006000700080009000a000b000c000d000e000f0010001100120013001400150016001700180019000b000201000023000033740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("sect163k1:sect163r1:sect163r2:sect193r1:sect193r2:sect233k1:sect233r1:sect239k1:sect283k1:sect283r1:sect409k1:sect409r1:sect571k1:sect571r1:secp160k1:secp160r1:secp160r2:secp192k1:prime192v1:secp224k1:secp224r1:secp256k1:prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 21 Win 7")
short+=("firefox_21_win7")
ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:CAMELLIA256-SHA:AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-AES128-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-AES128-SHA:SEED-SHA:CAMELLIA128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100a7010000a3030151d159b5c6a8e2e432e4fa5be54b0850bd809efe70e824293c882203f0ee1d6800004800ffc00ac0140088008700390038c00fc00500840035c007c009c011c0130045004400330032c00cc00ec002c0040096004100050004002fc008c01200160013c00dc003feff000a0100003200000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b000201000023000033740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 22 Win 7")
short+=("firefox_22_win7")
ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:CAMELLIA256-SHA:AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-AES128-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-AES128-SHA:SEED-SHA:CAMELLIA128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100aa010000a6030151fa2a72a6fa6d27feae3564b74d29a9cbaa7d432f5f6e5182d2bd25abb3b04a000046c00ac0140088008700390038c00fc00500840035c007c009c011c0130045004400330032c00cc00ec002c0040096004100050004002fc008c01200160013c00dc003feff000a0100003700000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 24.2.0 ESR Win 7")
short+=("firefox_2420_esr_win7")
ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:CAMELLIA256-SHA:AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-RC4-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-AES128-SHA:ECDH-RSA-RC4-SHA:ECDH-ECDSA-AES128-SHA:ECDH-ECDSA-RC4-SHA:SEED-SHA:CAMELLIA128-SHA:AES128-SHA:RC4-SHA:RC4-MD5:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100a7010000a3030152dd2828d1ee0481eedaff7c5edb64b528976fb7766e51404058e7666f72785c00004800ffc00ac0140088008700390038c00fc00500840035c009c007c013c0110045004400330032c00ec00cc004c00200960041002f00050004c008c01200160013c00dc003feff000a0100003200000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b000201000023000033740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 24 Win 7")
short+=("firefox_24_win7")
ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:CAMELLIA256-SHA:AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-AES128-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-AES128-SHA:SEED-SHA:CAMELLIA128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100a7010000a30301524d3e9effcb3d4ce13ee947036f9ef09aec0c2777b85432c1919369cad529fe00004800ffc00ac0140088008700390038c00fc00500840035c007c009c011c0130045004400330032c00cc00ec002c0040096004100050004002fc008c01200160013c00dc003feff000a0100003200000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b000201000023000033740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 26 Win 8")
short+=("firefox_26_win8")
ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:CAMELLIA256-SHA:AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-RC4-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-AES128-SHA:ECDH-RSA-RC4-SHA:ECDH-ECDSA-AES128-SHA:ECDH-ECDSA-RC4-SHA:SEED-SHA:CAMELLIA128-SHA:AES128-SHA:RC4-SHA:RC4-MD5:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100b0010000ac030152dd2b8ca1a308011744a36c449e52073f2fa2ff5de5e519c2e49e4340f2947b00004800ffc00ac0140088008700390038c00fc00500840035c009c007c013c0110045004400330032c00ec00cc004c00200960041002f00050004c008c01200160013c00dc003feff000a0100003b00000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b000201000023000033740000000500050100000000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 27 Win 8")
short+=("firefox_27_win8")
ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:EDH-RSA-DES-CBC3-SHA:AES128-SHA:CAMELLIA128-SHA:AES256-SHA:CAMELLIA256-SHA:DES-CBC3-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100b1010000ad0303eeedb1be0ed186b504a00a13984c3c1c2dfb93939e9a16b93940773db285d61000002ec02bc02fc00ac009c013c014c012c007c0110033003200450039003800880016002f004100350084000a000500040100005600000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000000500050100000000000d0012001004010501020104030503020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 29 OS X")
short+=("firefox_29_osx")
ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:EDH-RSA-DES-CBC3-SHA:AES128-SHA:CAMELLIA128-SHA:AES256-SHA:CAMELLIA256-SHA:DES-CBC3-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100b1010000ad0303e012d5c38373bd43274cba6ec28a56efa53a7e3e1bf620eaed21834b1bdc1f5a00002ec02bc02fc00ac009c013c014c012c007c0110033003200450039003800880016002f004100350084000a000500040100005600000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000000500050100000000000d0012001004010501020104030503020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 30 OS X")
short+=("firefox_30_osx")
ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:EDH-RSA-DES-CBC3-SHA:AES128-SHA:CAMELLIA128-SHA:AES256-SHA:CAMELLIA256-SHA:DES-CBC3-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100b1010000ad0303a7c35330633163ae4ca49796f648b005ee025112f17a7ef65117d54ee28602f400002ec02bc02fc00ac009c013c014c012c007c0110033003200450039003800880016002f004100350084000a000500040100005600000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000000500050100000000000d0012001004010501020104030503020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 31.3.0 ESR Win 7")
short+=("firefox_3130_esr_win7")
ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:EDH-RSA-DES-CBC3-SHA:AES128-SHA:CAMELLIA128-SHA:AES256-SHA:CAMELLIA256-SHA:DES-CBC3-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100b1010000ad030357ce74b9799a67f62ffd7f53fde81675039c3597b2b17f9e18dbbbd418dd68f600002ec02bc02fc00ac009c013c014c012c007c0110033003200450039003800880016002f004100350084000a000500040100005600000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000000500050100000000000d0012001004010501020104030503020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 31 OS X")
short+=("firefox_31_osx")
ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:EDH-RSA-DES-CBC3-SHA:AES128-SHA:CAMELLIA128-SHA:AES256-SHA:CAMELLIA256-SHA:DES-CBC3-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100b1010000ad03037daa4f4c8ca7922e261ce0a620d7220e42b0a5761733e8791e8b52a12524b0dc00002ec02bc02fc00ac009c013c014c012c007c0110033003200450039003800880016002f004100350084000a000500040100005600000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000000500050100000000000d0012001004010501020104030503020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 32 OS X")
short+=("firefox_32_osx")
ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:EDH-RSA-DES-CBC3-SHA:AES128-SHA:CAMELLIA128-SHA:AES256-SHA:CAMELLIA256-SHA:DES-CBC3-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100b1010000ad03035813901f246379098c8d653c1f4e8efa78b110c4a7224ee5a94ac00b312045c300002ec02bc02fc00ac009c013c014c012c007c0110033003200450039003800880016002f004100350084000a000500040100005600000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000000500050100000000000d0012001004010501020104030503020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 34 OS X")
short+=("firefox_34_osx")
ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100c2010000be030316d5f2760b6b1369dc25b8d0bbc6bd17099f30a769d7396e877790e980587f7c000020c02bc02fc00ac009c013c014c007c011003300320039002f0035000a000500040100007500000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b0002010000230000337400000010001b001908737064792f332e3106737064792f3308687474702f312e31000500050100000000000d0012001004010501020104030503020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 35 OS X")
short+=("firefox_35_osx")
ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100c8010000c40303d424604e56a4f359779595c71a8079613619e70e74511422525271b272d8a2e6000020c02bc02fc00ac009c013c014c007c011003300320039002f0035000a000500040100007b00000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b00020100002300003374000000100021001f0568322d313408737064792f332e3106737064792f3308687474702f312e31000500050100000000000d0012001004010501020104030503020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 37 OS X")
short+=("firefox_37_osx")
ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100c6010000c20303559dff0127b42a68e274b8fc4b53c406200a28b8fb4d054274cc565a162b2cf4000016c02bc02fc00ac009c013c01400330039002f0035000a0100008300000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b0002010000230000337400000010002900270568322d31360568322d31350568322d313402683208737064792f332e3108687474702f312e31000500050100000000000d0012001004010501020104030503020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 39 OS X")
short+=("firefox_39_osx")
ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100ca010000c60303efbbb1f18b9dd3e9fcf18cd01a52c517a47f65675e10f9492b6ec337885e8f4a000016c02bc02fc00ac009c013c01400330039002f0035000a0100008700000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b0002010000230000337400000010002900270568322d31360568322d31350568322d313402683208737064792f332e3108687474702f312e31000500050100000000000d001600140401050106010201040305030603020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1023)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 41 OS X")
short+=("firefox_41_osx")
ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100b8010000b403037cc4fdb0a8ca09368879a9089201137186ba8a19cc56a83aa7b5db776e7cf936000016c02bc02fc00ac009c013c01400330039002f0035000a0100007500000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b00020100002300003374000000100017001502683208737064792f332e3108687474702f312e31000500050100000000000d001600140401050106010201040305030603020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1023)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 42 OS X")
short+=("firefox_42_osx")
ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100b8010000b403038abe51f10e414011c88d4807c3cf465ae02ba1ef74dd1d59a0b8f04c4f13c969000016c02bc02fc00ac009c013c01400330039002f0035000a0100007500000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b00020100002300003374000000100017001502683208737064792f332e3108687474702f312e31000500050100000000000d001600140401050106010201040305030603020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1023)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 44 OS X")
short+=("firefox_44_osx")
ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100b8010000b403038d3e6929d322af321fc324639a0adf67c7f8e798b4b74e7ec1627fca71a76fbb000016c02bc02fc00ac009c013c01400330039002f0035000a0100007500000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b00020100002300003374000000100017001502683208737064792f332e3108687474702f312e31000500050100000000000d001600140401050106010201040305030603020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1023)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 45 Win 7")
short+=("firefox_45_win7")
ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100d8010000d40303c45b58b30c163444fbca2e8a1832e5a36999712fa83d7ff6b6c13d5a22181e7f205fd10ae0807128c0c0ede2914316ac6b777e529c1f0e89c849cdf0cbde26efa00016c02bc02fc00ac009c013c01400330039002f0035000a0100007500000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b00020100002300003374000000100017001502683208737064792f332e3108687474702f312e31000500050100000000000d001600140401050106010201040305030603020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1023)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 46 Win 7")
short+=("firefox_46_win7")
ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100bc010000b8030332260ce2eccf67fb7444d64dcefb92a46e78801f135fe4d44acc1052af1b56b2000016c02bc02fc00ac009c013c01400330039002f0035000a0100007900000014001200000f6465762e73736c6c6162732e636f6d00170000ff01000100000a00080006001700180019000b00020100002300003374000000100017001502683208737064792f332e3108687474702f312e31000500050100000000000d001600140401050106010201040305030603020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1023)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 47 Win 7")
short+=("firefox_47_win7")
ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100c0010000bc0303d6566247c62e11fa1426d88ff5069e8c438d8c0750348f913506d46c24e6204100001ac02bc02fcca9cca8c00ac009c013c01400330039002f0035000a0100007900000014001200000f6465762e73736c6c6162732e636f6d00170000ff01000100000a00080006001700180019000b00020100002300003374000000100017001502683208737064792f332e3108687474702f312e31000500050100000000000d001600140401050106010201040305030603020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1023)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 49 XP SP3")
short+=("firefox_49_xpsp3")
ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100c6010000c20303655bcc0742ffca05df48e52838a668733165388e09df153a44cbdc7c39c0bb4300001ec02bc02fcca9cca8c02cc030c00ac009c013c01400330039002f0035000a0100007b00000014001200000f6465762e73736c6c6162732e636f6d00170000ff01000100000a00080006001700180019000b00020100002300003374000000100017001502683208737064792f332e3108687474702f312e31000500050100000000000d0018001604010501060102010403050306030203050204020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1023)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 49 Win 7")
short+=("firefox_49_win7")
ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100e6010000e20303129162aca1f789ad3a792eaa766ba345770bbf2eb466e80bb51c3da72a29f95420b4419268602b765f6f206b948f9e6561cdd1f43606a44dc6fb2448862e26fc50001ec02bc02fcca9cca8c02cc030c00ac009c013c01400330039002f0035000a0100007b00000014001200000f6465762e73736c6c6162732e636f6d00170000ff01000100000a00080006001700180019000b00020100002300003374000000100017001502683208737064792f332e3108687474702f312e31000500050100000000000d0018001604010501060102010403050306030203050204020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1023)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("Firefox 53 Win 7")
short+=("firefox_53_win7")
ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("1603010200010001fc0303c6e53901883eada665bb773a45fb417e91d77d155c6092a7ad0f297f370c91d9000020130113031302c02bc02fcca9cca8c02cc030c013c01400330039002f0035000a010001b3001500b50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014001200000f6465762e73736c6c6162732e636f6d00170000ff01000100000a000e000c001d00170018001901000101000b00020100002300000010000e000c02683208687474702f312e310005000501000000000028006b0069001d0020ab2069b8be8cdd018bca89869f62bfbcc0e240b28ccc28f9c34a0c6c3d27b34300170041041abf1b74ecefdcb466e197a7be47fbbdbf4c6d10e8b9b73df21276a2dfc403db6db307b394465300de216b2a3ba47d87ce883adf65eae1e2a0adb821e0a64a06002b0009087f12030303020301ff030000000d0018001604030503060308040805080604010501060102030201002d00020101")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
Fix incorrect client simulation data In the data provided by https://api.dev.ssllabs.com/api/v3/getClients, Chrome 57 Win 7 and Firefox 53 Win 7 send ClientHellos that indicate support for TLSv1.3 draft 18, but the highest_protocol for each of these is specified as 0x0303. The result is that if the server being tested supports TLSV1.3 draft 18, `run_client_simulation()` will incorrectly report "No connection" for these servers since the DETECTED_TLS_VERSION (0x0304) will be higher than the specified highest_protocol. This PR fixes the problem by changing the highest_protocol to 0x0304. Note that another solution to this problem would be to change the ClientHello messages for these two browsers. It is my understanding that TLSv1.3 is disabled by default for these browsers, so presumably the ClientHello messages would not specify TLSv1.3 support if they were configured with TLSv1.3 support disabled.
2017-10-03 22:34:56 +02:00
highest_protocol+=("0x0304")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
service+=("HTTP,FTP")
minDhBits+=(1023)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("X25519:prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("IE 6 XP")
short+=("ie_6_xp")
ciphers+=("RC4-MD5:RC4-SHA:DES-CBC3-SHA:RC4-MD5:DES-CBC3-MD5:RC2-CBC-MD5:DES-CBC-SHA:DES-CBC-MD5:EXP1024-RC4-SHA:EXP1024-DES-CBC-SHA:EXP-RC4-MD5:EXP-RC2-CBC-MD5:EXP-RC4-MD5:EXP-RC2-CBC-MD5:EDH-DSS-DES-CBC3-SHA:EDH-DSS-DES-CBC-SHA:EXP1024-DHE-DSS-DES-CBC-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("")
warning+=("")
handshakebytes+=("804f01030000360000001000000400000500000a0100800700c00300800000090600400000640000620000030000060200800400800000130000120000630000ffd9f61eed63ba552d0bca94dc016081a3")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_tls1")
tlsvers+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0200")
highest_protocol+=("0x0300")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("IE 7 Vista")
short+=("ie_7_vista")
ciphers+=("AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-DSS-AES128-SHA:DHE-DSS-AES256-SHA:EDH-DSS-DES-CBC3-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("160301007d01000079030151fa62ab452795b7003c5f93ab677dbf57dd62bfa39e0ffaaeabe45b06552452000018002f00350005000ac009c00ac013c01400320038001300040100003800000014001200000f7777772e73736c6c6162732e636f6d000500050100000000000a00080006001700180019000b00020100ff01000100")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("IE 8 XP")
short+=("ie_8_xp")
ciphers+=("RC4-MD5:RC4-SHA:DES-CBC3-SHA:DES-CBC-SHA:EXP1024-RC4-SHA:EXP1024-DES-CBC-SHA:EXP-RC4-MD5:EXP-RC2-CBC-MD5:EDH-DSS-DES-CBC3-SHA:EDH-DSS-DES-CBC-SHA:EXP1024-DHE-DSS-DES-CBC-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("")
warning+=("")
handshakebytes+=("1603010048010000440301550bf46d2cff1997bd24885e963ba61faa8be6c28835c1f9bf74c1675cd3cf8500001600040005000a0009006400620003000600130012006301000005ff01000100")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("IE 8-10 Win 7")
short+=("ie_8-10_win7")
ciphers+=("ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:AES256-SHA:AES128-SHA:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:DHE-DSS-AES256-SHA:DHE-DSS-AES128-SHA:DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("160301007d01000079030155f092059b76ac28cceda732dac7f07a52aecc126f8ed890ab80e12e7eca049c000018c014c0130035002fc00ac00900380032000a0013000500040100003800000014001200000f6465762e73736c6c6162732e636f6d000500050100000000000a00080006001700180019000b00020100ff01000100")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(4096)
minRsaBits+=(-1)
maxRsaBits+=(16384)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("IE 8 Win 7")
short+=("ie_8_win7")
ciphers+=("AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA:DHE-DSS-AES128-SHA:DHE-DSS-AES256-SHA:EDH-DSS-DES-CBC3-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("160301007b01000077030151facea9bfdefb38bc40987322ebdc092498fc6e64e491683abd95179ea8405c000018002f00350005000ac013c014c009c00a003200380013000401000036ff0100010000000014001200000f7777772e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("IE 9 Win 7")
short+=("ie_9_win7")
ciphers+=("AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA:DHE-DSS-AES128-SHA:DHE-DSS-AES256-SHA:EDH-DSS-DES-CBC3-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("160301007b01000077030151facc6695164fc3429414f5926b8d794b56dcb2e1e45825575ed12406fd8cf5000018002f00350005000ac013c014c009c00a003200380013000401000036ff0100010000000014001200000f7777772e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("IE 10 Win Phone 8.0")
short+=("ie_10_winphone80")
ciphers+=("AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA:DHE-DSS-AES128-SHA:DHE-DSS-AES256-SHA:EDH-DSS-DES-CBC3-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("160301007f0100007b0301536487d458b1a364f27085798ca9e06353f0b300baeecd775e6ccc90a97037c2000018002f00350005000ac013c014c009c00a00320038001300040100003aff0100010000000014001200000f7777772e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b0002010000230000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("IE 11 Win 7")
short+=("ie_11_win7")
ciphers+=("ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:DHE-DSS-AES256-SHA256:DHE-DSS-AES128-SHA256:DHE-DSS-AES256-SHA:DHE-DSS-AES128-SHA:DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030300af010000ab03035954cc4cf4eaf6c39a501d311bc340fcbeab6b52a25defdc40e83a2699791c4f000030c028c027c014c013009f009e009d009c003d003c0035002fc02cc02bc024c023c00ac009006a004000380032000a00130100005200000014001200000f6465762e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100000d0014001206010603040105010201040305030203020200170000ff01000100")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(4096)
minRsaBits+=(-1)
maxRsaBits+=(16384)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("IE 11 Win 8.1")
short+=("ie_11_win81")
ciphers+=("ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:DHE-DSS-AES256-SHA256:DHE-DSS-AES128-SHA256:DHE-DSS-AES256-SHA:DHE-DSS-AES128-SHA:DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030300d1010000cd0303576c36e03bf1afe8d81100c68adc72bd0c678a5162275a5569651875123a7bec000034c028c027c014c013009f009e00390033009d009c003d003c0035002fc02cc02bc024c023c00ac009006a004000380032000a00130100007000000014001200000f6465762e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100000d001400120401050106010201040305030603020302020023000000100012001006737064792f3308687474702f312e313374000000170000ff01000100")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(4096)
minRsaBits+=(-1)
maxRsaBits+=(16384)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("IE 11 Win Phone 8.1")
short+=("ie_11_winphone81")
ciphers+=("AES128-SHA256:AES128-SHA:AES256-SHA256:AES256-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA:DHE-DSS-AES128-SHA256:DHE-DSS-AES128-SHA:DHE-DSS-AES256-SHA256:DHE-DSS-AES256-SHA:EDH-DSS-DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030300bb010000b703035363d297ad92a8fe276a4e5b9395d593e96fff9c3df0987e5dfbab544ce05832000026003c002f003d0035000ac027c013c014c02bc023c02cc024c009c00a00400032006a0038001301000068ff0100010000000014001200000f7777772e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100000d0010000e04010501020104030503020302020023000000100012001006737064792f3308687474702f312e3133740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("IE 11 Win Phone 8.1 Update")
short+=("ie_11_winphone81update")
ciphers+=("ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:DHE-DSS-AES256-SHA256:DHE-DSS-AES128-SHA256:DHE-DSS-AES256-SHA:DHE-DSS-AES128-SHA:DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030300c5010000c103035537a79a55362d42c3b3308fea91e85c5656021153d0a4baf03e7fef6e315c72000030c028c027c014c013009f009e009d009c003d003c0035002fc02cc02bc024c023c00ac009006a004000380032000a001301000068ff0100010000000014001200000f6465762e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100000d0010000e04010501020104030503020302020023000000100012001006737064792f3308687474702f312e3133740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("IE 11 Win 10")
short+=("ie_11_win10")
ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:DHE-DSS-AES256-SHA256:DHE-DSS-AES128-SHA256:DHE-DSS-AES256-SHA:DHE-DSS-AES128-SHA:EDH-DSS-DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030300d7010000d30303576c3861086a497dbb46489b67a88ac2e541c4863147fd09634bd0c630b73e92000038c02cc02bc030c02f009f009ec024c023c028c027c00ac009c014c01300390033009d009c003d003c0035002f000a006a00400038003200130100007200000014001200000f6465762e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100000d00140012040105010201040305030203020206010603002300000010000e000c02683208687474702f312e310017000055000006000100020002ff01000100")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(4096)
minRsaBits+=(-1)
maxRsaBits+=(16384)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("IE 11 Win 10 Preview")
short+=("ie_11_win10preview")
ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:DHE-DSS-AES256-SHA256:DHE-DSS-AES128-SHA256:DHE-DSS-AES256-SHA:DHE-DSS-AES128-SHA:DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030300BF010000BB0303542C787B4571BC82C90182FCA70DE4903C2A6AD38F7541731DBC8117A27ED8E4000034C030C02FC028C027C014C013009F009E009D009C003D003C0035002FC02CC02BC024C023C00AC009006A004000380032000A00130100005EFF010001000000000F000D00000A62617964656E2E636F6D000500050100000000000A0006000400170018000B00020100000D0010000E04010501020104030503020302020023000000100011000F0568322D313408687474702F312E31")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Edge 12 Win 10")
short+=("edge_12_win10")
ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:DHE-DSS-AES256-SHA256:DHE-DSS-AES128-SHA256:DHE-DSS-AES256-SHA:DHE-DSS-AES128-SHA:DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030300c9010000c50303558923f4d57c2d79aba0360f4030073f0554d057176bd610fb2aa74ee4407361000034c030c02fc028c027c014c013009f009e009d009c003d003c0035002fc02cc02bc024c023c00ac009006a004000380032000a00130100006800000014001200000f6465762e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100000d00140012040105010201040305030203020206010603002300000010000e000c02683208687474702f312e3100170000ff01000100")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(4096)
minRsaBits+=(-1)
maxRsaBits+=(16384)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Edge 13 Win 10")
short+=("edge_13_win10")
ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:DHE-DSS-AES256-SHA256:DHE-DSS-AES128-SHA256:DHE-DSS-AES256-SHA:DHE-DSS-AES128-SHA:EDH-DSS-DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030300d7010000d30303576c36d45fdcc8fdee4c62a86ccb3c116eaf6ba23d0726162972e953b993a96a000038c02cc02bc030c02f009f009ec024c023c028c027c00ac009c014c01300390033009d009c003d003c0035002f000a006a00400038003200130100007200000014001200000f6465762e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100000d00140012040105010201040305030203020206010603002300000010000e000c02683208687474702f312e310017000055000006000100020002ff01000100")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(4096)
minRsaBits+=(-1)
maxRsaBits+=(16384)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("Edge 13 Win Phone 10")
short+=("edge_13_winphone10")
ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:DHE-DSS-AES256-SHA256:DHE-DSS-AES128-SHA256:DHE-DSS-AES256-SHA:DHE-DSS-AES128-SHA:EDH-DSS-DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030300d3010000cf0303565ee836e62e7b9b734f4dca5f3f1ad62dc4e5f87bdf6c90f325b6a2e0012705000034c02cc02bc030c02f009f009ec024c023c028c027c00ac009c014c013009d009c003d003c0035002f000a006a00400038003200130100007200000014001200000f6465762e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100000d00140012040105010201040305030203020206010603002300000010000e000c02683208687474702f312e310017000055000006000100020002ff01000100")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(4096)
minRsaBits+=(-1)
maxRsaBits+=(16384)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("Opera 12.15 Win 7")
short+=("opera_1215_win7")
ciphers+=("DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA256:DH-RSA-AES256-SHA256:DH-DSS-AES256-SHA256:AES256-SHA256:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:DH-RSA-AES256-SHA:DH-DSS-AES256-SHA:AES256-SHA:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA256:DH-RSA-AES128-SHA256:DH-DSS-AES128-SHA256:AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DH-RSA-AES128-SHA:DH-DSS-AES128-SHA:AES128-SHA:RC4-SHA:RC4-MD5:EDH-DSS-DES-CBC3-SHA:DH-DSS-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:DH-RSA-DES-CBC3-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("160301008d01000089030151d15a838169aa7a0158e2e9dd53397bec509ab4135d83fc3e8457b4322332e3000036006b006a00690068003d0039003800370036003500670040003f003e003c0033003200310030002f000500040013000d00160010000a0100002a00000014001200000f7777772e73736c6c6162732e636f6dff0100010000050005010000000033740000")
protos+=("-tls1")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Opera 15 Win 7")
short+=("opera_15_win7")
ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:CAMELLIA256-SHA:AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:DHE-DSS-RC4-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-AES128-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-AES128-SHA:SEED-SHA:CAMELLIA128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100b9010000b5030251fa313df3fb4ade87369b14f89da7776406dc1cfd7bbf08fff0bbb0ef2f5da4000048c00ac0140088008700390038c00fc00500840035c007c009c011c01300450044006600330032c00cc00ec002c0040096004100050004002fc008c01200160013c00dc003feff000a0100004400000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000754f0000000500050100000000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_ssl2")
tlsvers+=("-tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0302")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Opera 16 Win 7")
short+=("opera_16_win7")
ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA256:AES256-SHA:AES256-SHA256:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:AES128-SHA256:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("1603010099010000950302524d41d17646ea784e8625eb64a4f5f4c94ad345ad0b4d9d8da570b2db45db64000028c00ac0140039006b0035003dc007c009c023c011c013c02700330067003200050004002f003c000a0100004400000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000754f0000000500050100000000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_ssl2")
tlsvers+=("-tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0302")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(4096)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Opera 17 Win 7")
short+=("opera_17_win7")
ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA256:AES256-SHA:AES256-SHA256:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:AES128-SHA256:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100d5010000d10303526793c01b8d4859d838c8658f07f895a2f35ba16fb786644db811b856197e9b000028c00ac0140039006b0035003dc007c009c023c011c013c02700330067003200050004002f003c000a0100008000000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b00020100002300003374000000100022002006737064792f3206737064792f3308737064792f332e3108687474702f312e31754f0000000500050100000000000d0012001004010501020104030503020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(4096)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("Safari 5.1.9 OS X 10.6.8")
short+=("safari_519_osx1068")
ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDH-ECDSA-AES128-SHA:ECDH-ECDSA-AES256-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-DES-CBC3-SHA:ECDH-RSA-AES128-SHA:ECDH-RSA-AES256-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-DES-CBC3-SHA:AES128-SHA:RC4-SHA:RC4-MD5:AES256-SHA:DES-CBC3-SHA:DES-CBC-SHA:EXP-RC4-MD5:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:DHE-DSS-AES128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:EDH-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC3-SHA:EDH-DSS-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("160301009d01000099030151d15dc2887b1852fd4291e36c3f4e8a35266e15dd6354779fbf5438b59b42da000046c00ac009c007c008c013c014c011c012c004c005c002c003c00ec00fc00cc00d002f000500040035000a000900030008000600320033003800390016001500140013001200110100002a00000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b00020100")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(4096)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("Safari 5 iOS 5.1.1")
short+=("safari_5_ios511")
ciphers+=("ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDH-ECDSA-AES256-SHA384:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES256-SHA384:ECDH-RSA-AES128-SHA256:ECDH-ECDSA-AES128-SHA:ECDH-ECDSA-AES256-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-DES-CBC3-SHA:ECDH-RSA-AES128-SHA:ECDH-RSA-AES256-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-DES-CBC3-SHA:AES256-SHA256:AES128-SHA256:AES128-SHA:RC4-SHA:RC4-MD5:AES256-SHA:DES-CBC3-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:EDH-RSA-DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030300b1010000ad030351d15d7aa4e0bca9cfe5971857ba54d3c9c1f96ecbb8aae4d4cd94e7dbbefef800004a00ffc024c023c00ac009c007c008c028c027c014c013c011c012c026c025c02ac029c004c005c002c003c00ec00fc00cc00d003d003c002f000500040035000a0067006b0033003900160100003a00000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d000c000a05010401020104030203")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(4096)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Safari 6.0.4 OS X 10.8.4")
short+=("safari_604_osx1084")
ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDH-ECDSA-AES128-SHA:ECDH-ECDSA-AES256-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-DES-CBC3-SHA:ECDH-RSA-AES128-SHA:ECDH-RSA-AES256-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-DES-CBC3-SHA:AES128-SHA:RC4-SHA:RC4-MD5:AES256-SHA:DES-CBC3-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:EDH-RSA-DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100a9010000a5030151fa327c6576dadde1e8a89d4d45bdc1d0c107b8cbe998337e02ca419a0bcb30204dd1c85d9fbc1607b27a35ec9dfd1dae2c589483843a73999c9de205748633b1003200ffc00ac009c007c008c014c013c011c012c004c005c002c003c00ec00fc00cc00d002f000500040035000a0033003900160100002a00000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b00020100")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(4096)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Safari 6 iOS 6.0.1")
short+=("safari_6_ios601")
ciphers+=("ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDH-ECDSA-AES256-SHA384:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES256-SHA384:ECDH-RSA-AES128-SHA256:ECDH-ECDSA-AES128-SHA:ECDH-ECDSA-AES256-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-DES-CBC3-SHA:ECDH-RSA-AES128-SHA:ECDH-RSA-AES256-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-DES-CBC3-SHA:AES256-SHA256:AES128-SHA256:AES128-SHA:RC4-SHA:RC4-MD5:AES256-SHA:DES-CBC3-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:EDH-RSA-DES-CBC3-SHA:ECDHE-ECDSA-NULL-SHA:ECDHE-RSA-NULL-SHA:ECDH-ECDSA-NULL-SHA:ECDH-RSA-NULL-SHA:NULL-SHA256:NULL-SHA:NULL-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030300bf010000bb030351d15ce21834380a8b5f491a00790b6d097014bb1e04124706631c6a6a3f973800005800ffc024c023c00ac009c007c008c028c027c014c013c011c012c026c025c02ac029c004c005c002c003c00ec00fc00cc00d003d003c002f000500040035000a0067006b003300390016c006c010c001c00b003b000200010100003a00000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d000c000a05010401020104030203")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(4096)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Safari 7 iOS 7.1")
short+=("safari_7_ios71")
ciphers+=("ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDH-ECDSA-AES256-SHA384:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES256-SHA384:ECDH-RSA-AES128-SHA256:ECDH-ECDSA-AES256-SHA:ECDH-ECDSA-AES128-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-DES-CBC3-SHA:ECDH-RSA-AES256-SHA:ECDH-RSA-AES128-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-DES-CBC3-SHA:AES256-SHA256:AES128-SHA256:AES128-SHA:RC4-SHA:RC4-MD5:AES256-SHA:DES-CBC3-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:EDH-RSA-DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100b1010000ad0303532017204048bb5331c62bf295ab4c2f2b3964f515c649a7d0947c8102d7348600004a00ffc024c023c00ac009c007c008c028c027c014c013c011c012c026c025c02ac029c005c004c002c003c00fc00ec00cc00d003d003c002f000500040035000a0067006b0033003900160100003a00000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d000c000a05010401020104030203")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(4096)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("Safari 7 OS X 10.9")
short+=("safari_7_osx109")
ciphers+=("ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDH-ECDSA-AES256-SHA384:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES256-SHA384:ECDH-RSA-AES128-SHA256:ECDH-ECDSA-AES256-SHA:ECDH-ECDSA-AES128-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-DES-CBC3-SHA:ECDH-RSA-AES256-SHA:ECDH-RSA-AES128-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-DES-CBC3-SHA:AES256-SHA256:AES128-SHA256:AES128-SHA:RC4-SHA:RC4-MD5:AES256-SHA:DES-CBC3-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:EDH-RSA-DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100d1010000cd030351fa3664edce86d82606540539ccd388418b1a5cb8cfda5e15349c635d4b028b203bf83c63e3da6777e407300b5d657e429f11cd7d857977e4390fda365b8d4664004a00ffc024c023c00ac009c007c008c028c027c014c013c011c012c026c025c02ac029c005c004c002c003c00fc00ec00cc00d003d003c002f000500040035000a0067006b0033003900160100003a00000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d000c000a05010401020104030203")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(4096)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Safari 8 iOS 8.0 Beta")
short+=("safari_8_ios80beta")
ciphers+=("ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDH-ECDSA-AES256-SHA384:ECDH-ECDSA-AES128-SHA256:ECDH-ECDSA-AES256-SHA:ECDH-ECDSA-AES128-SHA:ECDH-ECDSA-DES-CBC3-SHA:ECDH-RSA-AES256-SHA384:ECDH-RSA-AES128-SHA256:ECDH-RSA-AES256-SHA:ECDH-RSA-AES128-SHA:ECDH-RSA-DES-CBC3-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:EDH-RSA-DES-CBC3-SHA:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100b5010000b1030353ad95f2031490cfd60dbda382e916685b09dec1ab8ac0a4b0c9f39e048855ce00004a00ffc024c023c00ac009c008c028c027c014c013c012c026c025c005c004c003c02ac029c00fc00ec00d006b0067003900330016003d003c0035002f000ac007c011c002c00c000500040100003e00000014001200000f6465762e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d000c000a0501040102010403020333740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Safari 8 iOS 8.4")
short+=("safari_8_ios84")
ciphers+=("ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDH-ECDSA-AES256-SHA384:ECDH-ECDSA-AES128-SHA256:ECDH-ECDSA-AES256-SHA:ECDH-ECDSA-AES128-SHA:ECDH-ECDSA-DES-CBC3-SHA:ECDH-RSA-AES256-SHA384:ECDH-RSA-AES128-SHA256:ECDH-RSA-AES256-SHA:ECDH-RSA-AES128-SHA:ECDH-RSA-DES-CBC3-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:EDH-RSA-DES-CBC3-SHA:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100b5010000b1030354c20f1647345d0cac1db29f0489aab5e2016e6b2baca65e8c5eb6dd48a1fcd400004a00ffc024c023c00ac009c008c028c027c014c013c012c026c025c005c004c003c02ac029c00fc00ec00d006b0067003900330016003d003c0035002f000ac007c011c002c00c000500040100003e00000014001200000f6465762e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d000c000a0501040102010403020333740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(768)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(4096)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Safari 8 OS X 10.10")
short+=("safari_8_osx1010")
ciphers+=("ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDH-ECDSA-AES256-SHA384:ECDH-ECDSA-AES128-SHA256:ECDH-ECDSA-AES256-SHA:ECDH-ECDSA-AES128-SHA:ECDH-ECDSA-DES-CBC3-SHA:ECDH-RSA-AES256-SHA384:ECDH-RSA-AES128-SHA256:ECDH-RSA-AES256-SHA:ECDH-RSA-AES128-SHA:ECDH-RSA-DES-CBC3-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:EDH-RSA-DES-CBC3-SHA:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100b5010000b1030354c20a44e0d7681f3d55d7e9a764b67e6ffa6722c17b21e15bc2c9c98892460a00004a00ffc024c023c00ac009c008c028c027c014c013c012c026c025c005c004c003c02ac029c00fc00ec00d006b0067003900330016003d003c0035002f000ac007c011c002c00c000500040100003e00000014001200000f6465762e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d000c000a0501040102010403020333740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(768)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(8192)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Safari 9 iOS 9")
short+=("safari_9_ios9")
ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100e2010000de030355fb38fdc94c6c1ff6ee066f0e69579f40a83ce5454787e8834b60fd8c31e5ac00003400ffc02cc02bc024c023c00ac009c008c030c02fc028c027c014c013c012009d009c003d003c0035002f000ac007c011000500040100008100000014001200000f6465762e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d000e000c0501040102010503040302033374000000100030002e0268320568322d31360568322d31350568322d313408737064792f332e3106737064792f3308687474702f312e3100050005010000000000120000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(768)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(8192)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Safari 9 OS X 10.11")
short+=("safari_9_osx1011")
ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100e2010000de030355def1c4d1f6a12227389012da236581104b0bfa8b8a5bc849372531349dccc600003400ffc02cc02bc024c023c00ac009c008c030c02fc028c027c014c013c012009d009c003d003c0035002f000ac007c011000500040100008100000014001200000f6465762e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d000e000c0501040102010503040302033374000000100030002e0268320568322d31360568322d31350568322d313408737064792f332e3106737064792f3308687474702f312e3100050005010000000000120000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(768)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(8192)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("Safari 10 iOS 10")
short+=("safari_10_ios10")
ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100e2010000de030357f20123e3e60449eadcfacc873a02c3e71adcb47fd5634ec2fd49ccf99f13c500002c00ffc02cc02bc024c023c00ac009c008c030c02fc028c027c014c013c012009d009c003d003c0035002f000a0100008900000014001200000f6465762e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d00120010040102010501060104030203050306033374000000100030002e0268320568322d31360568322d31350568322d313408737064792f332e3106737064792f3308687474702f312e310005000501000000000012000000170000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(768)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(8192)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Safari 10 OS X 10.12")
short+=("safari_10_osx1012")
ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100e2010000de030357fde32ec4b7eb1c967e535ba93d9129ffd6a35fc5d6b14f785205e2a0c7e35600002c00ffc02cc02bc024c023c00ac009c008c030c02fc028c027c014c013c012009d009c003d003c0035002f000a0100008900000014001200000f6465762e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d00120010040102010501060104030203050306033374000000100030002e0268320568322d31360568322d31350568322d313408737064792f332e3106737064792f3308687474702f312e310005000501000000000012000000170000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(768)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(8192)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("Apple ATS 9 iOS 9")
short+=("apple_ats_9_ios9")
ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES128-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030300c6010000c2030355def146b7ed606006d8d54a3ece6c9c1b5070b51ce0e81d354178f0311d2e0100001800ffc02cc02bc024c00ac023c009c030c02fc028c027c0130100008100000014001200000f6465762e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d000e000c0501040102010503040302033374000000100030002e0268320568322d31360568322d31350568322d313408737064792f332e3106737064792f3308687474702f312e3100050005010000000000120000")
protos+=("-tls1_2")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
tlsvers+=("-tls1_2")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0303")
highest_protocol+=("0x0303")
service+=("HTTP")
minDhBits+=(768)
maxDhBits+=(-1)
minRsaBits+=(2048)
maxRsaBits+=(8192)
minEcdsaBits+=(256)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(true)
current+=(true)
names+=("Tor 17.0.9 Win 7")
short+=("tor_1709_win7")
ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:CAMELLIA256-SHA:AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-AES128-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-AES128-SHA:SEED-SHA:CAMELLIA128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100a30100009f0301526795b7dd72263ca4170729d52799a927b2e8ec0e2d844bca2cd7061de7a57d00004800ffc00ac0140088008700390038c00fc00500840035c007c009c011c0130045004400330032c00cc00ec002c0040096004100050004002fc008c01200160013c00dc003feff000a0100002e00000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b0002010033740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("Java 6u45")
short+=("java_6u45")
ciphers+=("RC4-MD5:RC4-MD5:RC4-SHA:AES128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DES-CBC3-SHA:DES-CBC3-MD5:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DES-CBC-SHA:DES-CBC-MD5:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:EXP-RC4-MD5:EXP-RC4-MD5:EXP-DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("")
warning+=("")
handshakebytes+=("8065010301003c0000002000000401008000000500002f00003300003200000a0700c00000160000130000090600400000150000120000030200800000080000140000110000ff52173357f48ce6722f974dbb429b9279208d1cf5b9088947c9ba16d9ecbc0fa6")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0200")
highest_protocol+=("0x0301")
service+=("ANY")
minDhBits+=(-1)
maxDhBits+=(1024)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("Java 7u25")
short+=("java_7u25")
ciphers+=("ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:AES128-SHA:ECDH-ECDSA-AES128-SHA:ECDH-RSA-AES128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:RC4-SHA:ECDH-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100ad010000a9030152178334e8b855253e50e4623e475b6941c18cc312de6395a98e1cd4fd6735e700002ac009c013002fc004c00e00330032c007c0110005c002c00cc008c012000ac003c00d00160013000400ff01000056000a0034003200170001000300130015000600070009000a0018000b000c0019000d000e000f001000110002001200040005001400080016000b0002010000000014001200000f7777772e73736c6c6162732e636f6d")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("ANY")
minDhBits+=(-1)
maxDhBits+=(1024)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:sect163k1:sect163r2:prime192v1:secp224r1:sect233k1:sect233r1:sect283k1:sect283r1:secp384r1:sect409k1:sect409r1:secp521r1:sect571k1:sect571r1:secp160k1:secp160r1:secp160r2:sect163r1:secp192k1:sect193r1:sect193r2:secp224k1:sect239k1:secp256k1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("Java 8b132")
short+=("java_8b132")
ciphers+=("ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:AES128-SHA256:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES128-SHA256:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:AES128-SHA:ECDH-ECDSA-AES128-SHA:ECDH-RSA-AES128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:RC4-SHA:ECDH-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:AES128-GCM-SHA256:ECDH-ECDSA-AES128-GCM-SHA256:ECDH-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030300e7010000e303035319a4a6c3909b598b7f5c0923999b7fa67cf6e79f73a016ea39a221c6989eeb000046c023c027003cc025c02900670040c009c013002fc004c00e00330032c007c0110005c002c00cc02bc02f009cc02dc031009e00a2c008c012000ac003c00d00160013000400ff01000074000a0034003200170001000300130015000600070009000a0018000b000c0019000d000e000f001000110002001200040005001400080016000b00020100000d001a001806030601050305010403040103030301020302010202010100000014001200000f7777772e73736c6c6162732e636f6d")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("ANY")
minDhBits+=(-1)
maxDhBits+=(2048)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:sect163k1:sect163r2:prime192v1:secp224r1:sect233k1:sect233r1:sect283k1:sect283r1:secp384r1:sect409k1:sect409r1:secp521r1:sect571k1:sect571r1:secp160k1:secp160r1:secp160r2:sect163r1:secp192k1:sect193r1:sect193r2:secp224k1:sect239k1:secp256k1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Java 8u31")
short+=("java_8u31")
ciphers+=("ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:AES128-SHA256:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES128-SHA256:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:AES128-SHA:ECDH-ECDSA-AES128-SHA:ECDH-RSA-AES128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:AES128-GCM-SHA256:ECDH-ECDSA-AES128-GCM-SHA256:ECDH-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:RC4-SHA:ECDH-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030300e7010000e3030354c21168512b37f2a7410028c16673626ff931146918c7b29f78150b7339e5af000046c023c027003cc025c02900670040c009c013002fc004c00e00330032c02bc02f009cc02dc031009e00a2c008c012000ac003c00d00160013c007c0110005c002c00c000400ff01000074000a0034003200170001000300130015000600070009000a0018000b000c0019000d000e000f001000110002001200040005001400080016000b00020100000d001a001806030601050305010403040103030301020302010202010100000014001200000f6465762e73736c6c6162732e636f6d")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("ANY")
minDhBits+=(-1)
maxDhBits+=(2048)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:sect163k1:sect163r2:prime192v1:secp224r1:sect233k1:sect233r1:sect283k1:sect283r1:secp384r1:sect409k1:sect409r1:secp521r1:sect571k1:sect571r1:secp160k1:secp160r1:secp160r2:sect163r1:secp192k1:sect193r1:sect193r2:secp224k1:sect239k1:secp256k1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("OpenSSL 0.9.8y")
short+=("openssl_098y")
ciphers+=("DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DES-CBC3-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:AES128-SHA:IDEA-CBC-SHA:RC4-SHA:RC4-MD5:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:EXP-RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100730100006f0301521782e707c1a780d3124742f35573dbb693babe5d3a7e9405c706af18b636bf00002a00390038003500160013000a00330032002f0007000500040015001200090014001100080006000300ff0100001c00000014001200000f7777772e73736c6c6162732e636f6d00230000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("ANY")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("OpenSSL 1.0.1h")
short+=("openssl_101h")
ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:SRP-DSS-AES-256-CBC-SHA:SRP-RSA-AES-256-CBC-SHA:DHE-DSS-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA256:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:ECDH-RSA-AES256-GCM-SHA384:ECDH-ECDSA-AES256-GCM-SHA384:ECDH-RSA-AES256-SHA384:ECDH-ECDSA-AES256-SHA384:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:AES256-GCM-SHA384:AES256-SHA256:AES256-SHA:CAMELLIA256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:SRP-DSS-3DES-EDE-CBC-SHA:SRP-RSA-3DES-EDE-CBC-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:SRP-DSS-AES-128-CBC-SHA:SRP-RSA-AES-128-CBC-SHA:DHE-DSS-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-SEED-SHA:DHE-DSS-SEED-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:ECDH-RSA-AES128-GCM-SHA256:ECDH-ECDSA-AES128-GCM-SHA256:ECDH-RSA-AES128-SHA256:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES128-SHA:ECDH-ECDSA-AES128-SHA:AES128-GCM-SHA256:AES128-SHA256:AES128-SHA:SEED-SHA:CAMELLIA128-SHA:IDEA-CBC-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:RC4-SHA:RC4-MD5:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:EXP-RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("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")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("ANY")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("sect571r1:sect571k1:secp521r1:sect409k1:sect409r1:secp384r1:sect283k1:sect283r1:secp256k1:prime256v1:sect239k1:sect233k1:sect233r1:secp224k1:secp224r1:sect193r1:sect193r2:secp192k1:prime192v1:sect163k1:sect163r1:sect163r2:secp160k1:secp160r1:secp160r2")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("OpenSSL 1.0.1l")
short+=("openssl_101l")
ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-DSS-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA256:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:ECDH-RSA-AES256-GCM-SHA384:ECDH-ECDSA-AES256-GCM-SHA384:ECDH-RSA-AES256-SHA384:ECDH-ECDSA-AES256-SHA384:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:AES256-GCM-SHA384:AES256-SHA256:AES256-SHA:CAMELLIA256-SHA:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:DHE-DSS-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-SEED-SHA:DHE-DSS-SEED-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:ECDH-RSA-AES128-GCM-SHA256:ECDH-ECDSA-AES128-GCM-SHA256:ECDH-RSA-AES128-SHA256:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES128-SHA:ECDH-ECDSA-AES128-SHA:AES128-GCM-SHA256:AES128-SHA256:AES128-SHA:SEED-SHA:CAMELLIA128-SHA:IDEA-CBC-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:RC4-SHA:RC4-MD5:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:EXP-RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("160301014f0100014b030332b230e5dd8c5573c219a243f397e31f407c7a93b60a26e7c3d5cca06a566fe1000094c030c02cc028c024c014c00a00a3009f006b006a0039003800880087c032c02ec02ac026c00fc005009d003d00350084c02fc02bc027c023c013c00900a2009e0067004000330032009a009900450044c031c02dc029c025c00ec004009c003c002f009600410007c011c007c00cc00200050004c012c00800160013c00dc003000a0015001200090014001100080006000300ff0100008e00000014001200000f6465762e73736c6c6162732e636f6d000b000403000102000a00340032000e000d0019000b000c00180009000a00160017000800060007001400150004000500120013000100020003000f0010001100230000000d0020001e060106020603050105020503040104020403030103020303020102020203000500050100000000000f000101")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("ANY")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("sect571r1:sect571k1:secp521r1:sect409k1:sect409r1:secp384r1:sect283k1:sect283r1:secp256k1:prime256v1:sect239k1:sect233k1:sect233r1:secp224k1:secp224r1:sect193r1:sect193r2:secp192k1:prime192v1:sect163k1:sect163r1:sect163r2:secp160k1:secp160r1:secp160r2")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("OpenSSL 1.0.2e")
short+=("openssl_102e")
ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DH-DSS-AES256-GCM-SHA384:DHE-DSS-AES256-GCM-SHA384:DH-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA256:DH-RSA-AES256-SHA256:DH-DSS-AES256-SHA256:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:DH-RSA-AES256-SHA:DH-DSS-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:DH-RSA-CAMELLIA256-SHA:DH-DSS-CAMELLIA256-SHA:ECDH-RSA-AES256-GCM-SHA384:ECDH-ECDSA-AES256-GCM-SHA384:ECDH-RSA-AES256-SHA384:ECDH-ECDSA-AES256-SHA384:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:AES256-GCM-SHA384:AES256-SHA256:AES256-SHA:CAMELLIA256-SHA:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:DH-DSS-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:DH-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA256:DH-RSA-AES128-SHA256:DH-DSS-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DH-RSA-AES128-SHA:DH-DSS-AES128-SHA:DHE-RSA-SEED-SHA:DHE-DSS-SEED-SHA:DH-RSA-SEED-SHA:DH-DSS-SEED-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:DH-RSA-CAMELLIA128-SHA:DH-DSS-CAMELLIA128-SHA:ECDH-RSA-AES128-GCM-SHA256:ECDH-ECDSA-AES128-GCM-SHA256:ECDH-RSA-AES128-SHA256:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES128-SHA:ECDH-ECDSA-AES128-SHA:AES128-GCM-SHA256:AES128-SHA256:AES128-SHA:SEED-SHA:CAMELLIA128-SHA:IDEA-CBC-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:RC4-SHA:RC4-MD5:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DH-RSA-DES-CBC3-SHA:DH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DH-RSA-DES-CBC-SHA:DH-DSS-DES-CBC-SHA:DES-CBC-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("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")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("ANY")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp521r1:brainpoolP512r1:brainpoolP384r1:secp384r1:brainpoolP256r1:secp256k1:sect571r1:sect571k1:sect409k1:sect409r1:sect283k1:sect283r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("Baidu Jan 2015")
short+=("baidu_jan_2015")
ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:CAMELLIA256-SHA:AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-AES128-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-AES128-SHA:SEED-SHA:CAMELLIA128-SHA:RC4-MD5:RC4-SHA:AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100a30100009f030154c1a814c755540538a93b25e7824623d0ee9fc294ee752869cf76819edb3aa200004800ffc00ac0140088008700390038c00fc00500840035c007c009c011c0130045004400330032c00cc00ec002c0040096004100040005002fc008c01200160013c00dc003feff000a0100002e00000014001200000f6465762e73736c6c6162732e636f6d000a00080006001700180019000b0002010000230000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("BingBot Dec 2013")
short+=("bingbot_dec_2013")
ciphers+=("AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA:DHE-DSS-AES128-SHA:DHE-DSS-AES256-SHA:EDH-DSS-DES-CBC3-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("")
warning+=("")
handshakebytes+=("160301005e0100005a030152a6b6912f40c56ac64206dc1409e8758b812f7076cf5ffd8d55a616681e551e000018002f00350005000ac013c014c009c00a003200380013000401000019ff01000100000a0006000400170018000b0002010000230000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("BingPreview Dec 2013")
short+=("bingpreview_dec_2013")
ciphers+=("DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DES-CBC3-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:AES128-SHA:IDEA-CBC-SHA:RC4-SHA:RC4-MD5:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:EXP-RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100700100006c030152a5abea96fe047222610094b2d13a7e0dea51181fa2c417dec9706757a9958800002a00390038003500160013000a00330032002f0007000500040015001200090014001100080006000300ff020100001800000014001200000f7777772e73736c6c6162732e636f6d")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("BingPreview Jun 2014")
short+=("bingpreview_jun_2014")
ciphers+=("DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DES-CBC3-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:AES128-SHA:IDEA-CBC-SHA:RC4-SHA:RC4-MD5:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:EXP-RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100700100006c030153ad3c76315cf735e16a170784cdc7d52012aa10eb6a85625ed6cac5e1af286500002a00390038003500160013000a00330032002f0007000500040015001200090014001100080006000300ff020100001800000014001200000f6465762e73736c6c6162732e636f6d")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("BingPreview Jan 2015")
short+=("bingpreview_jan_2015")
ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:SRP-DSS-AES-256-CBC-SHA:SRP-RSA-AES-256-CBC-SHA:DHE-DSS-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA256:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:ECDH-RSA-AES256-GCM-SHA384:ECDH-ECDSA-AES256-GCM-SHA384:ECDH-RSA-AES256-SHA384:ECDH-ECDSA-AES256-SHA384:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:AES256-GCM-SHA384:AES256-SHA256:AES256-SHA:CAMELLIA256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:SRP-DSS-3DES-EDE-CBC-SHA:SRP-RSA-3DES-EDE-CBC-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:SRP-DSS-AES-128-CBC-SHA:SRP-RSA-AES-128-CBC-SHA:DHE-DSS-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-SEED-SHA:DHE-DSS-SEED-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:ECDH-RSA-AES128-GCM-SHA256:ECDH-ECDSA-AES128-GCM-SHA256:ECDH-RSA-AES128-SHA256:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES128-SHA:ECDH-ECDSA-AES128-SHA:AES128-GCM-SHA256:AES128-SHA256:AES128-SHA:SEED-SHA:CAMELLIA128-SHA:IDEA-CBC-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:RC4-SHA:RC4-MD5:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:EXP-RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("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")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("sect571r1:sect571k1:secp521r1:sect409k1:sect409r1:secp384r1:sect283k1:sect283r1:secp256k1:prime256v1:sect239k1:sect233k1:sect233r1:secp224k1:secp224r1:sect193r1:sect193r2:secp192k1:prime192v1:sect163k1:sect163r1:sect163r2:secp160k1:secp160r1:secp160r2")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Googlebot Oct 2013")
short+=("googlebot_oct_2013")
ciphers+=("ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:RC4-SHA:RC4-MD5:AES128-SHA:DES-CBC3-SHA:AES256-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100b6010000b203015267881356b382cb8779331e85b5e77ef8c0c6d30c0bdcfef87145866912d59f000024c007c011c009c013c00ac01400050004002f000a003500330032001600130039003800ff0100006500000014001200000f7777772e73736c6c6162732e636f6d000b000403000102000a00340032000e000d0019000b000c00180009000a00160017000800060007001400150004000500120013000100020003000f0010001100230000000f00010133740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("sect571r1:sect571k1:secp521r1:sect409k1:sect409r1:secp384r1:sect283k1:sect283r1:secp256k1:prime256v1:sect239k1:sect233k1:sect233r1:secp224k1:secp224r1:sect193r1:sect193r2:secp192k1:prime192v1:sect163k1:sect163r1:sect163r2:secp160k1:secp160r1:secp160r2")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Googlebot Jun 2014")
short+=("googlebot_jun_2014")
ciphers+=("ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:RC4-SHA:RC4-MD5:AES128-SHA:DES-CBC3-SHA:AES256-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100b1010000ad0301b2da3708a1b55eb24ba0e985702f5823854fe9d5752d4ad948270343ef7a92d9000024c007c011c009c013c00ac01400050004002f000a003500330032001600130039003800ff0100006000000014001200000f6465762e73736c6c6162732e636f6d0023000033740000000b000403000102000a00340032000e000d0019000b000c00180009000a00160017000800060007001400150004000500120013000100020003000f00100011")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("sect571r1:sect571k1:secp521r1:sect409k1:sect409r1:secp384r1:sect283k1:sect283r1:secp256k1:prime256v1:sect239k1:sect233k1:sect233r1:secp224k1:secp224r1:sect193r1:sect193r2:secp192k1:prime192v1:sect163k1:sect163r1:sect163r2:secp160k1:secp160r1:secp160r2")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Googlebot Feb 2015")
short+=("googlebot_feb_2015")
ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:RC4-SHA:RC4-MD5:AES128-SHA:DES-CBC3-SHA:AES256-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100db010000d70303d9c72e000f6a7f0a156840bd4aa9fd0612df4aeb69a1a1c6452c5f1f4d0ba6b000002ac02bc02fc007c011c009c013c00ac014009c00050004002f000a003500330032001600130039003800ff0100008400000014001200000f6465762e73736c6c6162732e636f6d00230000000d0020001e06010602060305010502050304010402040303010302030302010202020333740000000b000403000102000a00340032000e000d0019000b000c00180009000a00160017000800060007001400150004000500120013000100020003000f00100011")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("sect571r1:sect571k1:secp521r1:sect409k1:sect409r1:secp384r1:sect283k1:sect283r1:secp256k1:prime256v1:sect239k1:sect233k1:sect233r1:secp224k1:secp224r1:sect193r1:sect193r2:secp192k1:prime192v1:sect163k1:sect163r1:sect163r2:secp160k1:secp160r1:secp160r2")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Yahoo Slurp Oct 2013")
short+=("yahoo_slurp_oct_2013")
ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:CAMELLIA256-SHA:AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-AES128-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-AES128-SHA:SEED-SHA:CAMELLIA128-SHA:RC4-MD5:RC4-SHA:AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100a30100009f0301525f6c38ddc9634ed772519ee023cd48ea60cf5f3a79fff5fd41491a39344c8900004800ffc00ac0140088008700390038c00fc00500840035c007c009c011c0130045004400330032c00cc00ec002c0040096004100040005002fc008c01200160013c00dc003feff000a0100002e00000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b0002010000230000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Yahoo Slurp Jun 2014")
short+=("yahoo_slurp_jun_2014")
ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-DSS-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA256:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:ECDH-RSA-AES256-GCM-SHA384:ECDH-ECDSA-AES256-GCM-SHA384:ECDH-RSA-AES256-SHA384:ECDH-ECDSA-AES256-SHA384:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:AES256-GCM-SHA384:AES256-SHA256:AES256-SHA:CAMELLIA256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:DHE-DSS-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-SEED-SHA:DHE-DSS-SEED-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:ECDH-RSA-AES128-GCM-SHA256:ECDH-ECDSA-AES128-GCM-SHA256:ECDH-RSA-AES128-SHA256:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES128-SHA:ECDH-ECDSA-AES128-SHA:AES128-GCM-SHA256:AES128-SHA256:AES128-SHA:SEED-SHA:CAMELLIA128-SHA:IDEA-CBC-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:RC4-SHA:RC4-MD5:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:EXP-RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("")
warning+=("")
handshakebytes+=("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")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("secp384r1:prime256v1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Yahoo Slurp Jan 2015")
short+=("yahoo_slurp_jan_2015")
ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-DSS-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA256:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:ECDH-RSA-AES256-GCM-SHA384:ECDH-ECDSA-AES256-GCM-SHA384:ECDH-RSA-AES256-SHA384:ECDH-ECDSA-AES256-SHA384:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:AES256-GCM-SHA384:AES256-SHA256:AES256-SHA:CAMELLIA256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:DHE-DSS-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-SEED-SHA:DHE-DSS-SEED-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:ECDH-RSA-AES128-GCM-SHA256:ECDH-ECDSA-AES128-GCM-SHA256:ECDH-RSA-AES128-SHA256:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES128-SHA:ECDH-ECDSA-AES128-SHA:AES128-GCM-SHA256:AES128-SHA256:AES128-SHA:SEED-SHA:CAMELLIA128-SHA:IDEA-CBC-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:RC4-SHA:RC4-MD5:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:EXP-RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("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")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("secp384r1:prime256v1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("YandexBot 3.0")
short+=("yandexbot_30")
ciphers+=("DES-CBC3-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("")
warning+=("")
handshakebytes+=("16030000310100002d030052e5747f771870662109bfd989a73aa284331afbc8ae51ba5d2e64a108cf71c7000006000a000500040100")
protos+=("-ssl3")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
tlsvers+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0300")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("YandexBot May 2014")
short+=("yandexbot_may_2014")
ciphers+=("DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DES-CBC3-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:AES128-SHA:IDEA-CBC-SHA:RC4-SHA:RC4-MD5:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:EXP-RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100760100007203015379d6fc38f530a5f78d3ec23de856d27305a4cebcc6d8f1b1ad40c8901fafa400002a00390038003500160013000a00330032002f0007000500040015001200090014001100080006000300ff0100001f0000001700150000127777772e6665697374796475636b2e636f6d00230000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("YandexBot Sep 2014")
short+=("yandexbot_sep_2014")
ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:SRP-DSS-AES-256-CBC-SHA:SRP-RSA-AES-256-CBC-SHA:DHE-DSS-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA256:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-GCM-SHA384:ECDH-ECDSA-AES256-GCM-SHA384:ECDH-RSA-AES256-SHA384:ECDH-ECDSA-AES256-SHA384:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:AES256-GCM-SHA384:AES256-SHA256:AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:SRP-DSS-3DES-EDE-CBC-SHA:SRP-RSA-3DES-EDE-CBC-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:SRP-DSS-AES-128-CBC-SHA:SRP-RSA-AES-128-CBC-SHA:DHE-DSS-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-AES128-GCM-SHA256:ECDH-ECDSA-AES128-GCM-SHA256:ECDH-RSA-AES128-SHA256:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES128-SHA:ECDH-ECDSA-AES128-SHA:AES128-GCM-SHA256:AES128-SHA256:AES128-SHA:IDEA-CBC-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:RC4-SHA:RC4-MD5:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:EXP-RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("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")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("sect571r1:sect571k1:secp521r1:sect409k1:sect409r1:secp384r1:sect283k1:sect283r1:secp256k1:prime256v1:sect239k1:sect233k1:sect233r1:secp224k1:secp224r1:sect193r1:sect193r2:secp192k1:prime192v1:sect163k1:sect163r1:sect163r2:secp160k1:secp160r1:secp160r2")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("YandexBot Jan 2015")
short+=("yandexbot_jan_2015")
ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:SRP-DSS-AES-256-CBC-SHA:SRP-RSA-AES-256-CBC-SHA:DHE-DSS-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA256:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-GCM-SHA384:ECDH-ECDSA-AES256-GCM-SHA384:ECDH-RSA-AES256-SHA384:ECDH-ECDSA-AES256-SHA384:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:AES256-GCM-SHA384:AES256-SHA256:AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:SRP-DSS-3DES-EDE-CBC-SHA:SRP-RSA-3DES-EDE-CBC-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:SRP-DSS-AES-128-CBC-SHA:SRP-RSA-AES-128-CBC-SHA:DHE-DSS-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-AES128-GCM-SHA256:ECDH-ECDSA-AES128-GCM-SHA256:ECDH-RSA-AES128-SHA256:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES128-SHA:ECDH-ECDSA-AES128-SHA:AES128-GCM-SHA256:AES128-SHA256:AES128-SHA:IDEA-CBC-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:RC4-SHA:RC4-MD5:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:EXP-RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
sni+=("$SNI")
warning+=("")
handshakebytes+=("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")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("sect571r1:sect571k1:secp521r1:sect409k1:sect409r1:secp384r1:sect283k1:sect283r1:secp256k1:prime256v1:sect239k1:sect233k1:sect233r1:secp224k1:secp224r1:sect193r1:sect193r2:secp192k1:prime192v1:sect163k1:sect163r1:sect163r2:secp160k1:secp160r1:secp160r2")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)