Git
/
testssl.sh
mirror of https://github.com/drwetter/testssl.sh.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
testssl.sh/etc/client-simulation.txt

3444 lines
256 KiB
Plaintext
Raw Normal View History

Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
# This file contains client handshake data used in the run_client_simulation() function.
Add client simulations .. for Android 8.1 and Firefox 66. Add ciphersuites to the existing handshakes and update the documentation accordingly.
2019-04-20 20:21:25 +02:00
# The file distributed with testssl.sh (~/etc/client-simulation.txt) has been generated
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
# from this script and manually edited (=which UA to show up) and sorted.
Add client simulations .. for Android 8.1 and Firefox 66. Add ciphersuites to the existing handshakes and update the documentation accordingly.
2019-04-20 20:21:25 +02:00
# In addition this file contains handshake data retrieved manually from
# wireshark. Data and HowTo see ~/etc/client-simulation.wiresharked.txt
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
#
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
# Most clients are taken from Qualys SSL Labs --- From: https://api.dev.ssllabs.com/api/v3/getClients
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
names+=("Android 2.3.7")
short+=("android_237")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("RC4-MD5:RC4-SHA:AES128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DES-CBC-SHA:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:EXP-RC4-MD5:EXP-DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("160301004b010000470301531f3de6b36804738bbb94a6ecd570a544789c3bb0a6ef8b9d702f997d928d4b00002000040005002f00330032000a00160013000900150012000300080014001100ff0100")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
current+=(false)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
names+=("Android 4.0.4")
short+=("android_404")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-AES128-SHA:ECDH-ECDSA-AES128-SHA:AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100c6010000c20301531f479cc7785f455ca7a70142af5be929c1ba931eedbf46dba6b6638da75e95000038c014c00a00390038c00fc0050035c012c00800160013c00dc003000ac013c00900330032c00ec004002fc011c007c00cc0020005000400ff020100006000000014001200000f7777772e73736c6c6162732e636f6d000b000403000102000a00340032000100020003000400050006000700080009000a000b000c000d000e000f00100011001200130014001500160017001800190023000033740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("sect163k1:sect163r1:sect163r2:sect193r1:sect193r2:sect233k1:sect233r1:sect239k1:sect283k1:sect283r1:sect409k1:sect409r1:sect571k1:sect571r1:secp160k1:secp160r1:secp160r2:secp192k1:prime192v1:secp224k1:secp224r1:secp256k1:prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Android 4.1.1")
short+=("android_411")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:SRP-DSS-AES-256-CBC-SHA:SRP-RSA-AES-256-CBC-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:SRP-DSS-3DES-EDE-CBC-SHA:SRP-RSA-3DES-EDE-CBC-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:SRP-DSS-AES-128-CBC-SHA:SRP-RSA-AES-128-CBC-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-AES128-SHA:ECDH-ECDSA-AES128-SHA:AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100d7010000d30301531f3f6dd9eb5f6b3586c628cc2cdc82cdb259b1a096237ba4df30dbbc0f26fb000044c014c00ac022c02100390038c00fc0050035c012c008c01cc01b00160013c00dc003000ac013c009c01fc01e00330032c00ec004002fc011c007c00cc0020005000400ff020100006500000014001200000f7777772e73736c6c6162732e636f6d000b000403000102000a00340032000e000d0019000b000c00180009000a00160017000800060007001400150004000500120013000100020003000f0010001100230000000f00010133740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("sect571r1:sect571k1:secp521r1:sect409k1:sect409r1:secp384r1:sect283k1:sect283r1:secp256k1:prime256v1:sect239k1:sect233k1:sect233r1:secp224k1:secp224r1:sect193r1:sect193r2:secp192k1:prime192v1:sect163k1:sect163r1:sect163r2:secp160k1:secp160r1:secp160r2")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
current+=(false)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
names+=("Android 4.2.2")
short+=("android_422")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:SRP-DSS-AES-256-CBC-SHA:SRP-RSA-AES-256-CBC-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:SRP-DSS-3DES-EDE-CBC-SHA:SRP-RSA-3DES-EDE-CBC-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:SRP-DSS-AES-128-CBC-SHA:SRP-RSA-AES-128-CBC-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-AES128-SHA:ECDH-ECDSA-AES128-SHA:AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100d1010000cd0301531f40a89e11d5681f563f3dad094375227035d4e9d2c1654d7d3954e3254558000044c014c00ac022c02100390038c00fc0050035c012c008c01cc01b00160013c00dc003000ac013c009c01fc01e00330032c00ec004002fc011c007c00cc0020005000400ff0100006000000014001200000f7777772e73736c6c6162732e636f6d000b000403000102000a00340032000e000d0019000b000c00180009000a00160017000800060007001400150004000500120013000100020003000f001000110023000033740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("sect571r1:sect571k1:secp521r1:sect409k1:sect409r1:secp384r1:sect283k1:sect283r1:secp256k1:prime256v1:sect239k1:sect233k1:sect233r1:secp224k1:secp224r1:sect193r1:sect193r2:secp192k1:prime192v1:sect163k1:sect163r1:sect163r2:secp160k1:secp160r1:secp160r2")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
Deprecation of more clients * Tor 17 * Android 4.2.2 * IE 7 Vista
2019-05-08 23:12:45 +02:00
current+=(false)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
names+=("Android 4.3")
short+=("android_43")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:SRP-DSS-AES-256-CBC-SHA:SRP-RSA-AES-256-CBC-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:SRP-DSS-3DES-EDE-CBC-SHA:SRP-RSA-3DES-EDE-CBC-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:SRP-DSS-AES-128-CBC-SHA:SRP-RSA-AES-128-CBC-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-AES128-SHA:ECDH-ECDSA-AES128-SHA:AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100d1010000cd0301531f41c3c5110dd688458e5e48e06d30814572ad7b8f9d9df1b0a8820b270685000044c014c00ac022c02100390038c00fc0050035c012c008c01cc01b00160013c00dc003000ac013c009c01fc01e00330032c00ec004002fc011c007c00cc0020005000400ff0100006000000014001200000f7777772e73736c6c6162732e636f6d000b000403000102000a00340032000e000d0019000b000c00180009000a00160017000800060007001400150004000500120013000100020003000f001000110023000033740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("sect571r1:sect571k1:secp521r1:sect409k1:sect409r1:secp384r1:sect283k1:sect283r1:secp256k1:prime256v1:sect239k1:sect233k1:sect233r1:secp224k1:secp224r1:sect193r1:sect193r2:secp192k1:prime192v1:sect163k1:sect163r1:sect163r2:secp160k1:secp160r1:secp160r2")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
current+=(false)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
names+=("Android 4.4.2")
short+=("android_442")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-DSS-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA256:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256-GCM-SHA384:AES256-SHA256:AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:DHE-DSS-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:AES128-GCM-SHA256:AES128-SHA256:AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100d1010000cd0303531f4317998fb70d57feded18c14433a1b665f963f7e3b1b045b6cc3d61bf21300004cc030c02cc014c00a00a3009f006b006a00390038009d003d0035c012c00800160013000ac02fc02bc027c023c013c00900a2009e0067004000330032009c003c002fc011c0070005000400ff0100005800000014001200000f7777772e73736c6c6162732e636f6d000b00020100000a0008000600190018001700230000000d00220020060106020603050105020503040104020403030103020303020102020203010133740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("secp521r1:secp384r1:prime256v1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
Teating of FFDHE groups * readded to the markdown * readded to the clientsimulations for Java 12
2022-05-04 18:29:29 +02:00
current+=(false)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
names+=("Android 5.0.0")
short+=("android_500")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:DHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:DHE-DSS-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:AES128-GCM-SHA256:AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100bd010000b9030354c21737f3d9d10696c91debf12415f9c45833a83cfbbd4c60c9b91407d2316b000038cc14cc13cc15c014c00a003900380035c012c00800160013000ac02fc02bc013c00900a2009e00330032009c002fc011c0070005000400ff0100005800000014001200000f6465762e73736c6c6162732e636f6d00230000000d00220020060106020603050105020503040104020403030103020303020102020203010133740000000b00020100000a00080006001900180017")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("secp521r1:secp384r1:prime256v1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
Teating of FFDHE groups * readded to the markdown * readded to the clientsimulations for Java 12
2022-05-04 18:29:29 +02:00
current+=(false)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
names+=("Android 6.0")
short+=("android_60")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:DHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:AES128-GCM-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100e2010000de030352f98411589cd6cd9dd403e70b1685b464a1d8c7495214d2c29b557738599f3420706946c402bf34b6356bfa5979bc3c65e1979a8fc632c201e976fef1ec3d55870022cc14cc13cc15c02bc02f009ec00ac0140039c009c0130033009c0035002f000a00ff0100007300000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d001600140601060305010503040104030301030302010203000500050100000000337400000012000000100014001208687474702f312e3108737064792f332e31000b00020100000a0006000400170018")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
Add wiresharked Android 7.0 (native) After being bitten by https://stackoverflow.com/questions/39133437/sslhandshakeexception-handshake-failed-on-android-n-7-0 I add a wiresharked Android 7.0 to reflect that bug in Android 7.0.
2020-06-23 15:26:31 +02:00
names+=("Android 7.0 (native)")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
short+=("android_70")
Add wiresharked Android 7.0 (native) After being bitten by https://stackoverflow.com/questions/39133437/sslhandshakeexception-handshake-failed-on-android-n-7-0 I add a wiresharked Android 7.0 to reflect that bug in Android 7.0.
2020-06-23 15:26:31 +02:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
Add wiresharked Android 7.0 (native) After being bitten by https://stackoverflow.com/questions/39133437/sslhandshakeexception-handshake-failed-on-android-n-7-0 I add a wiresharked Android 7.0 to reflect that bug in Android 7.0.
2020-06-23 15:26:31 +02:00
handshakebytes+=("160301009d0100009903036cea0f867ae9fdd087adedaa810119e62971b36c0486d44fb3099e51403c8a1e000018c02bc02ccca9c02fc030cca8c013c014009c009d002f003501000058ff010001000000000d000b00000873796e6f642e696d0017000000230000000d0016001406010603050105030401040303010303020102030010000e000c02683208687474702f312e31000b00020100000a000400020017")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
Add wiresharked Android 7.0 (native) After being bitten by https://stackoverflow.com/questions/39133437/sslhandshakeexception-handshake-failed-on-android-n-7-0 I add a wiresharked Android 7.0 to reflect that bug in Android 7.0.
2020-06-23 15:26:31 +02:00
alpn+=("h2,http/1.1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add wiresharked Android 7.0 (native) After being bitten by https://stackoverflow.com/questions/39133437/sslhandshakeexception-handshake-failed-on-android-n-7-0 I add a wiresharked Android 7.0 to reflect that bug in Android 7.0.
2020-06-23 15:26:31 +02:00
curves+=("prime256v1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
Add client simulations .. for Android 8.1 and Firefox 66. Add ciphersuites to the existing handshakes and update the documentation accordingly.
2019-04-20 20:21:25 +02:00
names+=("Android 8.1 (native)")
short+=("android_81")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA")
Add client simulations .. for Android 8.1 and Firefox 66. Add ciphersuites to the existing handshakes and update the documentation accordingly.
2019-04-20 20:21:25 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
Add client simulations .. for Android 8.1 and Firefox 66. Add ciphersuites to the existing handshakes and update the documentation accordingly.
2019-04-20 20:21:25 +02:00
warning+=("")
handshakebytes+=("16030100c0010000bc030346fcc7d3e5a9f68af0aa05de62de63c4ad1a4f472da56aa1424041106922370720ef51a7595abfd5bb32038c96c481bb6449053ba08023a752d124b1c1ca7d34fe001cc02bc02ccca9c02fc030cca8c009c00ac013c014009c009d002f0035010000570000001700150000127777772e676f6f676c65617069732e636f6d00170000ff01000100000a00080006001d00170018000b00020100000500050100000000000d00140012040308040401050308050501080606010201")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
alpn+=("h2,http/1.1")
All self retrieved Android handshakes modified to service ANY
2020-01-22 10:58:00 +01:00
service+=("ANY")
Add client simulations .. for Android 8.1 and Firefox 66. Add ciphersuites to the existing handshakes and update the documentation accordingly.
2019-04-20 20:21:25 +02:00
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("X25519:secp256r1:secp384r1")
requiresSha2+=(false)
Firefox 100, Chrom and Edge 101 (Win10) - disabled Opera (too old) - disabled ATS 9 / iOS 9 - reenabled Android 8.1
2022-05-09 17:49:16 +02:00
current+=(true)
Add client simulations .. for Android 8.1 and Firefox 66. Add ciphersuites to the existing handshakes and update the documentation accordingly.
2019-04-20 20:21:25 +02:00
Add client simlation data and provide howto While we are thankful that Ivan Ristic permitted to use the client data from SSLlabs, it became of bit outdated now (see #1158). Also as sslhaf [1] was used, the data comes from HTTP traffic only. This is a start to address it. It provides data from Android 9 (connecting to the play store, so that it is sure we don't capture a ClientHello from an application having an own TLS stack. Also it provides documentation how to grab data yourself, and provide it back to testssl.sh. Aim is at least for testssl.sh 3.0 to add Android 8 and OpenSSL 1.1.1 (@drwetter). My hope others can assist with Safari on OSX 11 and 12. Java 10 and 11, and a recent Opera and Edge version. (Firefox and Chrome are out of date too) Mail clients to follow later. [1] https://github.com/ssllabs/sslhaf
2019-04-18 10:06:01 +02:00
names+=("Android 9.0 (native)")
short+=("android_90")
Add Java 17 LTS plus * amend documentation * remove TLS 1.3 ciphers in ch_ciphers for consistency reasons
2022-05-04 15:46:36 +02:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Add client simulations .. for Android 8.1 and Firefox 66. Add ciphersuites to the existing handshakes and update the documentation accordingly.
2019-04-20 20:21:25 +02:00
ciphersuites+=("TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
Add client simlation data and provide howto While we are thankful that Ivan Ristic permitted to use the client data from SSLlabs, it became of bit outdated now (see #1158). Also as sslhaf [1] was used, the data comes from HTTP traffic only. This is a start to address it. It provides data from Android 9 (connecting to the play store, so that it is sure we don't capture a ClientHello from an application having an own TLS stack. Also it provides documentation how to grab data yourself, and provide it back to testssl.sh. Aim is at least for testssl.sh 3.0 to add Android 8 and OpenSSL 1.1.1 (@drwetter). My hope others can assist with Safari on OSX 11 and 12. Java 10 and 11, and a recent Opera and Edge version. (Firefox and Chrome are out of date too) Mail clients to follow later. [1] https://github.com/ssllabs/sslhaf
2019-04-18 10:06:01 +02:00
warning+=("")
handshakebytes+=("1603010246010002420303d6259dca682ab368c7e095da7189996da830514896063d4acdc83cb5d2c2568d2041a787bf8dd3d7a1ceda514a6606f1068432a13063ea320fd7e7b367af47ecae00220a0a130113021303c02bc02fc02cc030cca9cca8c013c014009c009d002f0035000a010001d77a7a00000000001e001c0000196c68332e676f6f676c6575736572636f6e74656e742e636f6d00170000ff01000100000a000a0008aaaa001d00170018000b00020100002300000010000e000c02683208687474702f312e31000500050100000000000d00140012040308040401050308050501080606010201001200000033002b0029aaaa000100001d00203e67895a11e9ce5c69df2995782adaddb7a03ef30b245000ca332d5940ecff20002d00020101002b000b0aeaea0304030303020301001b00030200026a6a0001000029010500e000da001c9941f6b101f853f370851e583bd22e03150fc67298947270c6058707fe1670efe590d777a34b9e2e2d0ec6aa8d0ddc375c2535934c75c9623d1a271f735417fdd9190dae7f4c8541c262f8fbfeee2e820f54f59f68e78503f5c093f6084037be22c20dad3d057f64dc73f2dd45948e27c707f3f2107b32040a21fa9c1273e7797aaf5a5bc8994e9eafc4bd43b2951e10f952564a910f146344ec6d0c49f75fc6a070c75f0ffdd84fe9e10f77c23f1062e90f9e1e396eddb84d8ac00bf7ac87c557622dd18c54bbc229268699c60434648b279dd86e996baee9d1c155002120235d43319c7d5bb4725a52fa782468cd2280bd622c40a36296b354759f6d4389")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_3 -tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
highest_protocol+=("0x0304")
Add client simulations .. for Android 8.1 and Firefox 66. Add ciphersuites to the existing handshakes and update the documentation accordingly.
2019-04-20 20:21:25 +02:00
alpn+=("h2,http/1.1")
All self retrieved Android handshakes modified to service ANY
2020-01-22 10:58:00 +01:00
service+=("ANY")
Add client simlation data and provide howto While we are thankful that Ivan Ristic permitted to use the client data from SSLlabs, it became of bit outdated now (see #1158). Also as sslhaf [1] was used, the data comes from HTTP traffic only. This is a start to address it. It provides data from Android 9 (connecting to the play store, so that it is sure we don't capture a ClientHello from an application having an own TLS stack. Also it provides documentation how to grab data yourself, and provide it back to testssl.sh. Aim is at least for testssl.sh 3.0 to add Android 8 and OpenSSL 1.1.1 (@drwetter). My hope others can assist with Safari on OSX 11 and 12. Java 10 and 11, and a recent Opera and Edge version. (Firefox and Chrome are out of date too) Mail clients to follow later. [1] https://github.com/ssllabs/sslhaf
2019-04-18 10:06:01 +02:00
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("X25519:secp256r1:secp384r1")
Android 9 still has 2 signature hash algos: x0201 + x0203
2020-01-22 11:41:42 +01:00
requiresSha2+=(false)
Add client simlation data and provide howto While we are thankful that Ivan Ristic permitted to use the client data from SSLlabs, it became of bit outdated now (see #1158). Also as sslhaf [1] was used, the data comes from HTTP traffic only. This is a start to address it. It provides data from Android 9 (connecting to the play store, so that it is sure we don't capture a ClientHello from an application having an own TLS stack. Also it provides documentation how to grab data yourself, and provide it back to testssl.sh. Aim is at least for testssl.sh 3.0 to add Android 8 and OpenSSL 1.1.1 (@drwetter). My hope others can assist with Safari on OSX 11 and 12. Java 10 and 11, and a recent Opera and Edge version. (Firefox and Chrome are out of date too) Mail clients to follow later. [1] https://github.com/ssllabs/sslhaf
2019-04-18 10:06:01 +02:00
current+=(true)
Add Android 10 client simulation
2020-01-22 10:54:50 +01:00
names+=("Android 10.0 (native)")
short+=("android_X")
Add Java 17 LTS plus * amend documentation * remove TLS 1.3 ciphers in ch_ciphers for consistency reasons
2022-05-04 15:46:36 +02:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Add Android 10 client simulation
2020-01-22 10:54:50 +01:00
ciphersuites+=("TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
Add Android 10 client simulation
2020-01-22 10:54:50 +01:00
warning+=("")
handshakebytes+=("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")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_3 -tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
highest_protocol+=("0x0304")
alpn+=("h2,http/1.1")
service+=("ANY")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("X25519:secp256r1:secp384r1")
requiresSha2+=(false)
current+=(true)
Add Android 11+12
2022-05-04 19:12:03 +02:00
names+=("Android 11 (native)")
short+=("android_11")
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA")
ciphersuites+=("TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256")
ch_sni+=("$SNI")
warning+=("")
handshakebytes+=("1603010200010001fc03030cd23f97801d202c5827875ff92bbcdcaba7bab8063f6a8203f260e12e3dffe920d864f831a405b2eeff3d9bfb107d8600518c0fb6a45492b134fbf7f828b08a860022130113021303c02bc02ccca9c02fc030cca8c009c00ac013c014009c009d002f00350100019100000010000e00000b662d64726f69642e6f726700170000ff01000100000a00080006001d00170018000b00020100002300000010000b000908687474702f312e31000500050100000000000d00140012040308040401050308050501080606010201003300260024001d002047a6c973047a94414d8db841fd3128a5915046c2b6ae19b69043eb0fd9cee156002d00020101002b0009080304030303020301001500ed000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_3 -tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
highest_protocol+=("0x0304")
alpn+=("h2,http/1.1")
service+=("ANY")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("X25519:secp256r1:secp384r1")
requiresSha2+=(false)
current+=(true)
names+=("Android 12 (native)")
short+=("android_12")
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA")
ciphersuites+=("TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256")
ch_sni+=("$SNI")
warning+=("")
handshakebytes+=("1603010200010001fc0303ef9015ea56c63737ffffc0accb09384a436f080a39f77fe113356ae5bfd1254a20163dc9147addf7e7fdb45852fbfe8e3fb2b79ec6f725bfda838d429eba22e6670022130113021303c02bc02ccca9c02fc030cca8c009c00ac013c014009c009d002f00350100019100000010000e00000b662d64726f69642e6f726700170000ff01000100000a00080006001d00170018000b00020100002300000010000b000908687474702f312e31000500050100000000000d00140012040308040401050308050501080606010201003300260024001d0020f209906d70ae4ba88ac3c89810eb7092be23e377f98d8c96696dec9296358c3e002d00020101002b0009080304030303020301001500ed000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_3 -tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
highest_protocol+=("0x0304")
alpn+=("h2,http/1.1")
service+=("ANY")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("X25519:secp256r1:secp384r1")
requiresSha2+=(false)
current+=(true)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
names+=("Chrome 27 Win 7")
short+=("chrome_27_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:CAMELLIA256-SHA:AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:DHE-DSS-RC4-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-AES128-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-AES128-SHA:SEED-SHA:CAMELLIA128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100b9010000b5030251d1589cbb4af03c585fadf8741670b304c96b6b9cd67a9972f2f117199994ee000048c00ac0140088008700390038c00fc00500840035c007c009c011c01300450044006600330032c00cc00ec002c0040096004100050004002fc008c01200160013c00dc003feff000a0100004400000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000754f0000000500050100000000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_ssl2")
tlsvers+=("-tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0302")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 28 Win 7")
short+=("chrome_28_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:CAMELLIA256-SHA:AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:DHE-DSS-RC4-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-AES128-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-AES128-SHA:SEED-SHA:CAMELLIA128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100b9010000b5030251fa2a84056d23d8eda90a57fa8fce1fdca180e4b63f78792ea67f3c0abfe2d4000048c00ac0140088008700390038c00fc00500840035c007c009c011c01300450044006600330032c00cc00ec002c0040096004100050004002fc008c01200160013c00dc003feff000a0100004400000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000754f0000000500050100000000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_ssl2")
tlsvers+=("-tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0302")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 29 Win 7")
short+=("chrome_29_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA256:AES256-SHA:AES256-SHA256:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:AES128-SHA256:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100900100008c030252417a5a280a06236420ca1a916bd1a4a0ca397d0908a11db51dd12d066ce245000028c00ac0140039006b0035003dc007c009c023c011c013c02700330067003200050004002f003c000a0100003b00000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000754f0000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_ssl2")
tlsvers+=("-tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0302")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 30 Win 7")
short+=("chrome_30_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA256:AES256-SHA:AES256-SHA256:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:AES128-SHA256:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100d5010000d10303524d3fba0440d42fbbb01d702ba9c041d2fc697f83288c1713d98204266c6dc3000028c00ac0140039006b0035003dc007c009c023c011c013c02700330067003200050004002f003c000a0100008000000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b00020100002300003374000000100022002006737064792f3206737064792f3308737064792f332e3108687474702f312e31754f0000000500050100000000000d0012001004010501020104030503020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 31 Win 7")
short+=("chrome_31_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100d1010000cd03035289e11a35cdb85cdc0b754c295ad207ca69931bc1a24b7fac2bf505beeb07a3000024c02bc02f009e009cc00ac01400390035c007c009c011c0130033003200050004002f000a0100008000000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b00020100002300003374000000100022002006737064792f3206737064792f3308737064792f332e3108687474702f312e31754f0000000500050100000000000d0012001004010501020104030503020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 32 Win 7")
short+=("chrome_32_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100d1010000cd030352dd2a2fa57a2b28556990f7a165d98ee6db68a58e3fe03a63f1e49660f683da000024c02bc02f009e009cc00ac01400390035c007c009c011c0130033003200050004002f000a0100008000000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b00020100002300003374000000100022002006737064792f3206737064792f3308737064792f332e3108687474702f312e31754f0000000500050100000000000d0012001004010501020104030503020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 33 Win 7")
short+=("chrome_33_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100d2010000ce030353199d5b3e169e9dde7fa14fd1338ade91887c70040e39117dc261b29de21852000028cc14cc13c02bc02f009e009cc00ac01400390035c007c009c011c0130033003200050004002f000a0100007d00000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b0002010000230000337400000010001b001906737064792f3308737064792f332e3108687474702f312e3175500000000500050100000000000d001200100401050102010403050302030402020200120000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 34 OS X")
short+=("chrome_34_osx")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100d2010000ce0303e4165a3865ece64acaa5f86ffaf810f345cd516c25688f191d0356f175f9e2c5000028c02bc02f009ecc14cc13c00ac009c013c014c007c011003300320039009c002f0035000a000500040100007d00000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b0002010000230000337400000010001b001906737064792f3308737064792f332e3108687474702f312e3175500000000500050100000000000d001200100401050102010403050302030402020200120000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 35 Win 7")
short+=("chrome_35_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100d2010000ce03032cb92528d05b1cf32e6b5384a7d39ddf0908f656e4572520c5bac4bf96621434000028cc14cc13c02bc02f009ec00ac009c013c014c007c011003300320039009c002f0035000a000500040100007d00000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b0002010000230000337400000010001b001906737064792f3308737064792f332e3108687474702f312e3175500000000500050100000000000d001200100401050102010403050302030402020200120000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 36 Win 7")
short+=("chrome_36_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100d2010000ce03032466f5db5320e055ed5aad2d86eccf3a9b4d07e1b1cdce8cb86c635d45c8449a000028cc14cc13c02bc02f009ec00ac009c013c014c007c011003300320039009c002f0035000a000500040100007d00000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b0002010000230000337400000010001b001906737064792f3308737064792f332e3108687474702f312e317550000000050005010000000000120000000d0012001004010501020104030503020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 37 OS X")
short+=("chrome_37_osx")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100d2010000ce0303a210a65d166b4f98899fe70b3ab274c941fab765b91fa37f77dde1844a9721c9000028c02bc02f009ecc14cc13c00ac009c013c014c007c011003300320039009c002f0035000a000500040100007d00000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b0002010000230000337400000010001b001906737064792f3308737064792f332e3108687474702f312e317550000000050005010000000000120000000d0012001004010501020104030503020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 39 OS X")
short+=("chrome_39_osx")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:DHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:AES128-GCM-SHA256:AES256-SHA:AES128-SHA:RC4-SHA:RC4-MD5:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100d3010000cf0303b7fa18a5509607700fb70acc290b717322d66bfc899a662b2746e1741cf4e74000002ac02fc02b009ecc14cc13cc15c014c00a0039c013c0090033c011c007009c0035002f00050004000a00ff0100007c00000014001200000f6465762e73736c6c6162732e636f6d00230000000d00160014060106030501050304010403030103030201020300050005010000000033740000001200000010001b001908687474702f312e3106737064792f3308737064792f332e3175500000000b00020100000a00080006001700180019")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 40 OS X")
short+=("chrome_40_osx")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:DHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:AES128-GCM-SHA256:AES256-SHA:AES128-SHA:RC4-SHA:RC4-MD5:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100d0010000cc030377d43ab02ced3617a218bb7313d9f271111f4d4f92b2d4d532e79c243ba0221500002ac02fc02b009ecc14cc13cc15c014c00a0039c013c0090033c011c007009c0035002f00050004000a00ff0100007900000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d001600140601060305010503040104030301030302010203000500050100000000337400000012000000100014001208687474702f312e3108737064792f332e3175500000000b00020100000a00080006001700180019")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 42 OS X")
short+=("chrome_42_osx")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:DHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:AES128-GCM-SHA256:AES256-SHA:AES128-SHA:RC4-SHA:RC4-MD5:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100d4010000d0030387a11416629548eab673e8e89c34252810ae36dd940f1649e67a8cb34655e1e700002ac02bc02f009ecc14cc13cc15c00ac0140039c009c0130033c007c011009c0035002f00050004000a00ff0100007d00000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d00160014060106030501050304010403030103030201020300050005010000000033740000001200000010001a001808687474702f312e3108737064792f332e310568322d313475500000000b00020100000a0006000400170018")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(4096)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 43 OS X")
short+=("chrome_43_osx")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:DHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:AES128-GCM-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100cf010000cb03033d87f93d7c4c1b021da6c5e2e9fe02ec0aee76ede29835ffb55c28571933c60b000022c02bc02f009ecc14cc13cc15c00ac0140039c009c0130033009c0035002f000a00ff0100008000000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d00160014060106030501050304010403030103030201020300050005010000000033740000001200000010001d001b08687474702f312e3108737064792f332e310568322d313402683275500000000b00020100000a0006000400170018")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(4096)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 45 OS X")
short+=("chrome_45_osx")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:DHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:AES128-GCM-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100cf010000cb0303ee7b22a8ec3bbae266ee164ca54dbff70de23513d137fc78ba7ef975763312dc000022c02bc02f009ecc14cc13cc15c00ac0140039c009c0130033009c0035002f000a00ff0100008000000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d00160014060106030501050304010403030103030201020300050005010000000033740000001200000010001d001b08687474702f312e3108737064792f332e310568322d313402683275500000000b00020100000a0006000400170018")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(8192)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 47 OS X")
short+=("chrome_47_osx")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:AES128-GCM-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100ca010000c6030361f8858af23cda649baf596105ec66bfe5b4642046c486e3e5321b26588392f400001ec02bc02f009ecc14cc13c00ac0140039c009c0130033009c0035002f000a0100007fff0100010000000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d001600140601060305010503040104030301030302010203000500050100000000337400000012000000100017001508687474702f312e3108737064792f332e3102683275500000000b00020100000a0006000400170018")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(8192)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 48 OS X")
short+=("chrome_48_osx")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:AES128-GCM-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100ca010000c603037ac82baca9c0d08b1a01ecfb0bf5824f195153e0c6b4b48f5bf4621846376e8a00001ec02bc02f009ecc14cc13c00ac0140039c009c0130033009c0035002f000a0100007fff0100010000000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d001600140601060305010503040104030301030302010203000500050100000000337400000012000000100017001502683208737064792f332e3108687474702f312e3175500000000b00020100000a0006000400170018")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(8192)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 49 Win 7")
short+=("chrome_49_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:AES128-GCM-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100c8010000c40303699c8a4e3834651e3cfcb22fa744ce5ce607e584a16f527d30f8af8a4dbea42100001cc02bc02fcca9cca8cc14cc13c00ac014c009c013009c0035002f000a0100007fff0100010000000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d001600140601060305010503040104030301030302010203000500050100000000337400000012000000100017001502683208737064792f332e3108687474702f312e3175500000000b00020100000a0006000400170018")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 49 XP SP3")
short+=("chrome_49_xpsp3")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:AES128-GCM-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100be010000ba03030405d478d0c0c15c089a01050e9a0286170de6d8766ec3d07d8ae27cf44abbd9000012c02fcca8cc13c014c013009c0035002f000a0100007fff0100010000000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d001600140601060305010503040104030301030302010203000500050100000000337400000012000000100017001502683208737064792f332e3108687474702f312e3175500000000b00020100000a0006000400170018")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 50 Win 7")
short+=("chrome_50_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:AES128-GCM-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100c6010000c20303ff4e7eb1ce359979138cc297b9911c45cd06b1928e4356132844309a471c3c9700001cc02bc02fcca9cca8cc14cc13c00ac014c009c013009c0035002f000a0100007dff0100010000000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d0012001006010603050105030401040302010203000500050100000000337400000012000000100017001502683208737064792f332e3108687474702f312e3175500000000b00020100000a00080006001d00170018")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("X25519:prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Chrome 51 Win 7")
short+=("chrome_51_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-CHACHA20-POLY1305-OLD:ECDHE-RSA-CHACHA20-POLY1305-OLD:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100bf010000bb030355079db3b53ce2a6d3335902717ae6a84cc4b855d0b68775ac287f38da343c55000022c02bc02fc02cc030cca9cca8cc14cc13c009c013c00ac014009c009d002f0035000a01000070ff0100010000000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d0012001006010603050105030401040302010203000500050100000000001200000010000e000c02683208687474702f312e3175500000000b00020100000a00080006001d00170018")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("X25519:prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
current+=(false)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
names+=("Chrome 57 Win 7")
short+=("chrome_57_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("1603010200010001fc0303300e33daa8f1f0d2d72c461a08851a34fe44df4e18ae5349aafb48e79dd69b650000223a3a130113021303c02bc02fc02cc030cca9cca8c013c014009c009d002f0035000a010001b13a3a0000ff0100010000000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d00140012040308040401050308050501080606010201000500050100000000001200000010000e000c02683208687474702f312e3175500000000b000201000028002b00290a0a000100001d0020beb55ec17fee5371560958f78db49d4dc33723e42a200b24646b6d77a7a94867002d00020101002b000b0aaaaa7f12030303020301000a000a00080a0a001d00170018dada000100001500ec0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
Fix incorrect client simulation data In the data provided by https://api.dev.ssllabs.com/api/v3/getClients, Chrome 57 Win 7 and Firefox 53 Win 7 send ClientHellos that indicate support for TLSv1.3 draft 18, but the highest_protocol for each of these is specified as 0x0303. The result is that if the server being tested supports TLSV1.3 draft 18, `run_client_simulation()` will incorrectly report "No connection" for these servers since the DETECTED_TLS_VERSION (0x0304) will be higher than the specified highest_protocol. This PR fixes the problem by changing the highest_protocol to 0x0304. Note that another solution to this problem would be to change the ClientHello messages for these two browsers. It is my understanding that TLSv1.3 is disabled by default for these browsers, so presumably the ClientHello messages would not specify TLSv1.3 support if they were configured with TLSv1.3 support disabled.
2017-10-03 22:34:56 +02:00
highest_protocol+=("0x0304")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("X25519:prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
Updated client simulation SSLabs API only added one newer version of Chrome (70) and one newer version of Firefox (62). Thus the wishlist gets longer (c15e0425dcb4ba95cab471d77b6aba70ef7a9712). Missing is Android 8 and 9, OpenSSL 1.1.1, Safari on OSX 11 and 12. Java 10 and 11. Fix #1104
2018-11-05 22:47:28 +01:00
current+=(false)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
names+=("Chrome 65 Win 7")
short+=("chrome_65_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
ciphersuites+=("TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
warning+=("")
handshakebytes+=("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")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
highest_protocol+=("0x0304")
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("X25519:prime256v1:secp384r1")
requiresSha2+=(false)
Add firefox 71 ... and * deprecate openssl 1.0.1 * enable Chrome 74 instead of Chrome 65
2020-01-13 22:57:10 +01:00
current+=(false)
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
Updated client simulation SSLabs API only added one newer version of Chrome (70) and one newer version of Firefox (62). Thus the wishlist gets longer (c15e0425dcb4ba95cab471d77b6aba70ef7a9712). Missing is Android 8 and 9, OpenSSL 1.1.1, Safari on OSX 11 and 12. Java 10 and 11. Fix #1104
2018-11-05 22:47:28 +01:00
names+=("Chrome 70 Win 10")
short+=("chrome_70_win10")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Updated client simulation SSLabs API only added one newer version of Chrome (70) and one newer version of Firefox (62). Thus the wishlist gets longer (c15e0425dcb4ba95cab471d77b6aba70ef7a9712). Missing is Android 8 and 9, OpenSSL 1.1.1, Safari on OSX 11 and 12. Java 10 and 11. Fix #1104
2018-11-05 22:47:28 +01:00
ciphersuites+=("TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
Updated client simulation SSLabs API only added one newer version of Chrome (70) and one newer version of Firefox (62). Thus the wishlist gets longer (c15e0425dcb4ba95cab471d77b6aba70ef7a9712). Missing is Android 8 and 9, OpenSSL 1.1.1, Safari on OSX 11 and 12. Java 10 and 11. Fix #1104
2018-11-05 22:47:28 +01:00
warning+=("")
handshakebytes+=("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")
protos+=("-no_ssl3 -no_ssl2")
Add Opera 60 + Chrome 73 Chrome 74 update pending
2019-04-23 11:33:47 +02:00
tlsvers+=("-tls1_3 -tls1_2 -tls1_1 -tls1")
Updated client simulation SSLabs API only added one newer version of Chrome (70) and one newer version of Firefox (62). Thus the wishlist gets longer (c15e0425dcb4ba95cab471d77b6aba70ef7a9712). Missing is Android 8 and 9, OpenSSL 1.1.1, Safari on OSX 11 and 12. Java 10 and 11. Fix #1104
2018-11-05 22:47:28 +01:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0304")
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("X25519:prime256v1:secp384r1")
requiresSha2+=(false)
Add Opera 60 + Chrome 73 Chrome 74 update pending
2019-04-23 11:33:47 +02:00
current+=(false)
names+=("Chrome 73 (Win 10)")
short+=("chrome_73_win10")
Add Java 17 LTS plus * amend documentation * remove TLS 1.3 ciphers in ch_ciphers for consistency reasons
2022-05-04 15:46:36 +02:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Add Opera 60 + Chrome 73 Chrome 74 update pending
2019-04-23 11:33:47 +02:00
ciphersuites+=("TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
Add Opera 60 + Chrome 73 Chrome 74 update pending
2019-04-23 11:33:47 +02:00
warning+=("")
handshakebytes+=("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")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_3 -tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
highest_protocol+=("0x0304")
alpn+=("h2,http/1.1")
Add recent Chrome and Opera handshakes Chrome 78 and 79, Opera 65 and 66 Remove FTP from Chrome
2020-01-13 16:02:39 +01:00
service+=("HTTP")
Add Opera 60 + Chrome 73 Chrome 74 update pending
2019-04-23 11:33:47 +02:00
minDhBits+=(1024)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("X25519:secp256r1:secp384r1")
requiresSha2+=(false)
Update to chrome 74
2019-04-25 09:17:23 +02:00
current+=(false)
names+=("Chrome 74 (Win 10)")
short+=("chrome_74_win10")
Add Java 17 LTS plus * amend documentation * remove TLS 1.3 ciphers in ch_ciphers for consistency reasons
2022-05-04 15:46:36 +02:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Update to chrome 74
2019-04-25 09:17:23 +02:00
ciphersuites+=("TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
Update to chrome 74
2019-04-25 09:17:23 +02:00
warning+=("")
handshakebytes+=("1603010200010001fc0303b95f99af8f312f71a9bc94bec54911187cb29365a901f40ef1cc193c51f23afc2074daa030d03808edadb1ac4bc435e41cd106166b6436f925a6501f7314eae2a600222a2a130113021303c02bc02fc02cc030cca9cca8c013c014009c009d002f0035000a01000191baba000000000012001000000d7777772e676f6f676c652e646500170000ff01000100000a000a00087a7a001d00170018000b00020100002300000010000e000c02683208687474702f312e31000500050100000000000d00140012040308040401050308050501080606010201001200000033002b00297a7a000100001d002062d1679f47bf75d0486d6fc6fa041c13b6cbb4c53984998d0b2db4c3f6b1277a002d00020101002b000b0aaaaa0304030303020301001b00030200027a7a000100001500cb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_3 -tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
highest_protocol+=("0x0304")
alpn+=("h2,http/1.1")
Add recent Chrome and Opera handshakes Chrome 78 and 79, Opera 65 and 66 Remove FTP from Chrome
2020-01-13 16:02:39 +01:00
service+=("HTTP")
minDhBits+=(1024)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("X25519:secp256r1:secp384r1")
requiresSha2+=(false)
Firefox 100, Chrom and Edge 101 (Win10) - disabled Opera (too old) - disabled ATS 9 / iOS 9 - reenabled Android 8.1
2022-05-09 17:49:16 +02:00
current+=(false)
Add recent Chrome and Opera handshakes Chrome 78 and 79, Opera 65 and 66 Remove FTP from Chrome
2020-01-13 16:02:39 +01:00
names+=("Chrome 78 (Win 10)")
short+=("chrome_78_win10")
Add Java 17 LTS plus * amend documentation * remove TLS 1.3 ciphers in ch_ciphers for consistency reasons
2022-05-04 15:46:36 +02:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Add recent Chrome and Opera handshakes Chrome 78 and 79, Opera 65 and 66 Remove FTP from Chrome
2020-01-13 16:02:39 +01:00
ciphersuites+=("TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
Add recent Chrome and Opera handshakes Chrome 78 and 79, Opera 65 and 66 Remove FTP from Chrome
2020-01-13 16:02:39 +01:00
warning+=("")
handshakebytes+=("1603010200010001fc030332e6eabb5d4b9818074f79423b0a9cde127a309671fcf0d0420bdb68f98bbc9320085a3e18e8e5cf4060c1e7065523d344f09186ffb835c10095df30b1611bc49a0022eaea130113021303c02bc02fc02cc030cca9cca8c013c014009c009d002f0035000a010001912a2a000000000014001200000f73736c2e677374617469632e636f6d00170000ff01000100000a000a0008eaea001d00170018000b00020100002300000010000e000c02683208687474702f312e31000500050100000000000d00140012040308040401050308050501080606010201001200000033002b0029eaea000100001d0020e0a5bb30a2a14bc13685b4a19ba59628aad22b761dceb63a9dcfa10475f84260002d00020101002b000b0a0a0a0304030303020301001b00030200025a5a000100001500c9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_3 -tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
highest_protocol+=("0x0304")
alpn+=("h2,http/1.1")
service+=("HTTP")
minDhBits+=(1024)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("X25519:secp256r1:secp384r1")
requiresSha2+=(false)
current+=(false)
names+=("Chrome 79 (Win 10)")
short+=("chrome_79_win10")
Add Java 17 LTS plus * amend documentation * remove TLS 1.3 ciphers in ch_ciphers for consistency reasons
2022-05-04 15:46:36 +02:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Add recent Chrome and Opera handshakes Chrome 78 and 79, Opera 65 and 66 Remove FTP from Chrome
2020-01-13 16:02:39 +01:00
ciphersuites+=("TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
Add recent Chrome and Opera handshakes Chrome 78 and 79, Opera 65 and 66 Remove FTP from Chrome
2020-01-13 16:02:39 +01:00
warning+=("")
handshakebytes+=("1603010200010001fc03032f8eea63ff25d05264565777081b6d1a326e12f37751c33c7e953973af65b2ab20a62f96b75b1c41454679b64cd32fb0fbbf99ff019501d92184d589a529c21c590022caca130113021303c02bc02fc02cc030cca9cca8c013c014009c009d002f0035000a010001917a7a000000000014001200000f73736c2e677374617469632e636f6d00170000ff01000100000a000a0008eaea001d00170018000b00020100002300000010000e000c02683208687474702f312e31000500050100000000000d00140012040308040401050308050501080606010201001200000033002b0029eaea000100001d0020465dfa0295bf9cd3578d2f23bbfdf58d6468c5dd0c071f0b7c6bb92fc507685b002d00020101002b000b0ababa0304030303020301001b00030200029a9a000100001500c9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_3 -tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
highest_protocol+=("0x0304")
alpn+=("h2,http/1.1")
service+=("HTTP")
Update to chrome 74
2019-04-25 09:17:23 +02:00
minDhBits+=(1024)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("X25519:secp256r1:secp384r1")
requiresSha2+=(false)
Updated client simulation SSLabs API only added one newer version of Chrome (70) and one newer version of Firefox (62). Thus the wishlist gets longer (c15e0425dcb4ba95cab471d77b6aba70ef7a9712). Missing is Android 8 and 9, OpenSSL 1.1.1, Safari on OSX 11 and 12. Java 10 and 11. Fix #1104
2018-11-05 22:47:28 +01:00
current+=(true)
Firefox 100, Chrom and Edge 101 (Win10) - disabled Opera (too old) - disabled ATS 9 / iOS 9 - reenabled Android 8.1
2022-05-09 17:49:16 +02:00
names+=("Chrome 101 (Win 10)")
short+=("chrome_101_win10")
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA")
ciphersuites+=("TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256")
ch_sni+=("$SNI")
warning+=("")
handshakebytes+=("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")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_3 -tls1_2")
lowest_protocol+=("0x0303")
highest_protocol+=("0x0304")
alpn+=("h2,http/1.1")
service+=("HTTP")
minDhBits+=(1024)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("X25519:secp256r1:secp384r1")
requiresSha2+=(true)
current+=(true)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
names+=("Firefox 10.0.12 ESR Win 7")
short+=("firefox_10012_esr_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:CAMELLIA256-SHA:AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-AES128-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-AES128-SHA:SEED-SHA:CAMELLIA128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100a30100009f030151fa38b87e68fb3b8c0fb02f6c7142e53e4fcb69cdd10296088ecc001e9bcebc00004800ffc00ac0140088008700390038c00fc00500840035c007c009c011c0130045004400330032c00cc00ec002c0040096004100050004002fc008c01200160013c00dc003feff000a0100002e00000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b0002010000230000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
Remove FTP as a "service" from Firefox' client simulation ... as firefox never supported FTP over TLS or SSL, see https://bugzilla.mozilla.org/show_bug.cgi?id=85464 In general browsers tend to remove noaways cleartext FTP from browsers.
2020-01-13 23:11:59 +01:00
service+=("HTTP")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 17.0.7 ESR Win 7")
short+=("firefox_1707_esr_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:CAMELLIA256-SHA:AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-AES128-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-AES128-SHA:SEED-SHA:CAMELLIA128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100a7010000a3030151fa3041dd8c81c89fd6434776d3c39f3b8305fb116a567e219054e63b8e21a000004800ffc00ac0140088008700390038c00fc00500840035c007c009c011c0130045004400330032c00cc00ec002c0040096004100050004002fc008c01200160013c00dc003feff000a0100003200000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b000201000023000033740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
Remove FTP as a "service" from Firefox' client simulation ... as firefox never supported FTP over TLS or SSL, see https://bugzilla.mozilla.org/show_bug.cgi?id=85464 In general browsers tend to remove noaways cleartext FTP from browsers.
2020-01-13 23:11:59 +01:00
service+=("HTTP")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 21 Fedora 19")
short+=("firefox_21_fedora19")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:CAMELLIA256-SHA:AES256-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:SEED-SHA:CAMELLIA128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100b3010000af030151fa34e8a9deb1b23f2cae528c633c4ac28931d1afb8b01215bc2980ed312a5a00002800ff00880087003900380084003500450044003300320096004100050004002f00160013feff000a0100005e00000014001200000f7777772e73736c6c6162732e636f6d000a00340032000100020003000400050006000700080009000a000b000c000d000e000f0010001100120013001400150016001700180019000b000201000023000033740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
Remove FTP as a "service" from Firefox' client simulation ... as firefox never supported FTP over TLS or SSL, see https://bugzilla.mozilla.org/show_bug.cgi?id=85464 In general browsers tend to remove noaways cleartext FTP from browsers.
2020-01-13 23:11:59 +01:00
service+=("HTTP")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("sect163k1:sect163r1:sect163r2:sect193r1:sect193r2:sect233k1:sect233r1:sect239k1:sect283k1:sect283r1:sect409k1:sect409r1:sect571k1:sect571r1:secp160k1:secp160r1:secp160r2:secp192k1:prime192v1:secp224k1:secp224r1:secp256k1:prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 21 Win 7")
short+=("firefox_21_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:CAMELLIA256-SHA:AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-AES128-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-AES128-SHA:SEED-SHA:CAMELLIA128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100a7010000a3030151d159b5c6a8e2e432e4fa5be54b0850bd809efe70e824293c882203f0ee1d6800004800ffc00ac0140088008700390038c00fc00500840035c007c009c011c0130045004400330032c00cc00ec002c0040096004100050004002fc008c01200160013c00dc003feff000a0100003200000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b000201000023000033740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
Remove FTP as a "service" from Firefox' client simulation ... as firefox never supported FTP over TLS or SSL, see https://bugzilla.mozilla.org/show_bug.cgi?id=85464 In general browsers tend to remove noaways cleartext FTP from browsers.
2020-01-13 23:11:59 +01:00
service+=("HTTP")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 22 Win 7")
short+=("firefox_22_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:CAMELLIA256-SHA:AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-AES128-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-AES128-SHA:SEED-SHA:CAMELLIA128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100aa010000a6030151fa2a72a6fa6d27feae3564b74d29a9cbaa7d432f5f6e5182d2bd25abb3b04a000046c00ac0140088008700390038c00fc00500840035c007c009c011c0130045004400330032c00cc00ec002c0040096004100050004002fc008c01200160013c00dc003feff000a0100003700000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
Remove FTP as a "service" from Firefox' client simulation ... as firefox never supported FTP over TLS or SSL, see https://bugzilla.mozilla.org/show_bug.cgi?id=85464 In general browsers tend to remove noaways cleartext FTP from browsers.
2020-01-13 23:11:59 +01:00
service+=("HTTP")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 24.2.0 ESR Win 7")
short+=("firefox_2420_esr_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:CAMELLIA256-SHA:AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-RC4-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-AES128-SHA:ECDH-RSA-RC4-SHA:ECDH-ECDSA-AES128-SHA:ECDH-ECDSA-RC4-SHA:SEED-SHA:CAMELLIA128-SHA:AES128-SHA:RC4-SHA:RC4-MD5:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100a7010000a3030152dd2828d1ee0481eedaff7c5edb64b528976fb7766e51404058e7666f72785c00004800ffc00ac0140088008700390038c00fc00500840035c009c007c013c0110045004400330032c00ec00cc004c00200960041002f00050004c008c01200160013c00dc003feff000a0100003200000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b000201000023000033740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
Remove FTP as a "service" from Firefox' client simulation ... as firefox never supported FTP over TLS or SSL, see https://bugzilla.mozilla.org/show_bug.cgi?id=85464 In general browsers tend to remove noaways cleartext FTP from browsers.
2020-01-13 23:11:59 +01:00
service+=("HTTP")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 24 Win 7")
short+=("firefox_24_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:CAMELLIA256-SHA:AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-AES128-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-AES128-SHA:SEED-SHA:CAMELLIA128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100a7010000a30301524d3e9effcb3d4ce13ee947036f9ef09aec0c2777b85432c1919369cad529fe00004800ffc00ac0140088008700390038c00fc00500840035c007c009c011c0130045004400330032c00cc00ec002c0040096004100050004002fc008c01200160013c00dc003feff000a0100003200000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b000201000023000033740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
Remove FTP as a "service" from Firefox' client simulation ... as firefox never supported FTP over TLS or SSL, see https://bugzilla.mozilla.org/show_bug.cgi?id=85464 In general browsers tend to remove noaways cleartext FTP from browsers.
2020-01-13 23:11:59 +01:00
service+=("HTTP")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 26 Win 8")
short+=("firefox_26_win8")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:CAMELLIA256-SHA:AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-RC4-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-AES128-SHA:ECDH-RSA-RC4-SHA:ECDH-ECDSA-AES128-SHA:ECDH-ECDSA-RC4-SHA:SEED-SHA:CAMELLIA128-SHA:AES128-SHA:RC4-SHA:RC4-MD5:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100b0010000ac030152dd2b8ca1a308011744a36c449e52073f2fa2ff5de5e519c2e49e4340f2947b00004800ffc00ac0140088008700390038c00fc00500840035c009c007c013c0110045004400330032c00ec00cc004c00200960041002f00050004c008c01200160013c00dc003feff000a0100003b00000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b000201000023000033740000000500050100000000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
Remove FTP as a "service" from Firefox' client simulation ... as firefox never supported FTP over TLS or SSL, see https://bugzilla.mozilla.org/show_bug.cgi?id=85464 In general browsers tend to remove noaways cleartext FTP from browsers.
2020-01-13 23:11:59 +01:00
service+=("HTTP")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 27 Win 8")
short+=("firefox_27_win8")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:EDH-RSA-DES-CBC3-SHA:AES128-SHA:CAMELLIA128-SHA:AES256-SHA:CAMELLIA256-SHA:DES-CBC3-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100b1010000ad0303eeedb1be0ed186b504a00a13984c3c1c2dfb93939e9a16b93940773db285d61000002ec02bc02fc00ac009c013c014c012c007c0110033003200450039003800880016002f004100350084000a000500040100005600000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000000500050100000000000d0012001004010501020104030503020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
Remove FTP as a "service" from Firefox' client simulation ... as firefox never supported FTP over TLS or SSL, see https://bugzilla.mozilla.org/show_bug.cgi?id=85464 In general browsers tend to remove noaways cleartext FTP from browsers.
2020-01-13 23:11:59 +01:00
service+=("HTTP")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 29 OS X")
short+=("firefox_29_osx")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:EDH-RSA-DES-CBC3-SHA:AES128-SHA:CAMELLIA128-SHA:AES256-SHA:CAMELLIA256-SHA:DES-CBC3-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100b1010000ad0303e012d5c38373bd43274cba6ec28a56efa53a7e3e1bf620eaed21834b1bdc1f5a00002ec02bc02fc00ac009c013c014c012c007c0110033003200450039003800880016002f004100350084000a000500040100005600000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000000500050100000000000d0012001004010501020104030503020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
Remove FTP as a "service" from Firefox' client simulation ... as firefox never supported FTP over TLS or SSL, see https://bugzilla.mozilla.org/show_bug.cgi?id=85464 In general browsers tend to remove noaways cleartext FTP from browsers.
2020-01-13 23:11:59 +01:00
service+=("HTTP")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 30 OS X")
short+=("firefox_30_osx")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:EDH-RSA-DES-CBC3-SHA:AES128-SHA:CAMELLIA128-SHA:AES256-SHA:CAMELLIA256-SHA:DES-CBC3-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100b1010000ad0303a7c35330633163ae4ca49796f648b005ee025112f17a7ef65117d54ee28602f400002ec02bc02fc00ac009c013c014c012c007c0110033003200450039003800880016002f004100350084000a000500040100005600000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000000500050100000000000d0012001004010501020104030503020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
Remove FTP as a "service" from Firefox' client simulation ... as firefox never supported FTP over TLS or SSL, see https://bugzilla.mozilla.org/show_bug.cgi?id=85464 In general browsers tend to remove noaways cleartext FTP from browsers.
2020-01-13 23:11:59 +01:00
service+=("HTTP")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 31.3.0 ESR Win 7")
short+=("firefox_3130_esr_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:EDH-RSA-DES-CBC3-SHA:AES128-SHA:CAMELLIA128-SHA:AES256-SHA:CAMELLIA256-SHA:DES-CBC3-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100b1010000ad030357ce74b9799a67f62ffd7f53fde81675039c3597b2b17f9e18dbbbd418dd68f600002ec02bc02fc00ac009c013c014c012c007c0110033003200450039003800880016002f004100350084000a000500040100005600000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000000500050100000000000d0012001004010501020104030503020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
Remove FTP as a "service" from Firefox' client simulation ... as firefox never supported FTP over TLS or SSL, see https://bugzilla.mozilla.org/show_bug.cgi?id=85464 In general browsers tend to remove noaways cleartext FTP from browsers.
2020-01-13 23:11:59 +01:00
service+=("HTTP")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 31 OS X")
short+=("firefox_31_osx")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:EDH-RSA-DES-CBC3-SHA:AES128-SHA:CAMELLIA128-SHA:AES256-SHA:CAMELLIA256-SHA:DES-CBC3-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100b1010000ad03037daa4f4c8ca7922e261ce0a620d7220e42b0a5761733e8791e8b52a12524b0dc00002ec02bc02fc00ac009c013c014c012c007c0110033003200450039003800880016002f004100350084000a000500040100005600000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000000500050100000000000d0012001004010501020104030503020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
Remove FTP as a "service" from Firefox' client simulation ... as firefox never supported FTP over TLS or SSL, see https://bugzilla.mozilla.org/show_bug.cgi?id=85464 In general browsers tend to remove noaways cleartext FTP from browsers.
2020-01-13 23:11:59 +01:00
service+=("HTTP")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 32 OS X")
short+=("firefox_32_osx")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:EDH-RSA-DES-CBC3-SHA:AES128-SHA:CAMELLIA128-SHA:AES256-SHA:CAMELLIA256-SHA:DES-CBC3-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100b1010000ad03035813901f246379098c8d653c1f4e8efa78b110c4a7224ee5a94ac00b312045c300002ec02bc02fc00ac009c013c014c012c007c0110033003200450039003800880016002f004100350084000a000500040100005600000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000000500050100000000000d0012001004010501020104030503020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
Remove FTP as a "service" from Firefox' client simulation ... as firefox never supported FTP over TLS or SSL, see https://bugzilla.mozilla.org/show_bug.cgi?id=85464 In general browsers tend to remove noaways cleartext FTP from browsers.
2020-01-13 23:11:59 +01:00
service+=("HTTP")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 34 OS X")
short+=("firefox_34_osx")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100c2010000be030316d5f2760b6b1369dc25b8d0bbc6bd17099f30a769d7396e877790e980587f7c000020c02bc02fc00ac009c013c014c007c011003300320039002f0035000a000500040100007500000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b0002010000230000337400000010001b001908737064792f332e3106737064792f3308687474702f312e31000500050100000000000d0012001004010501020104030503020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
Remove FTP as a "service" from Firefox' client simulation ... as firefox never supported FTP over TLS or SSL, see https://bugzilla.mozilla.org/show_bug.cgi?id=85464 In general browsers tend to remove noaways cleartext FTP from browsers.
2020-01-13 23:11:59 +01:00
service+=("HTTP")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 35 OS X")
short+=("firefox_35_osx")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100c8010000c40303d424604e56a4f359779595c71a8079613619e70e74511422525271b272d8a2e6000020c02bc02fc00ac009c013c014c007c011003300320039002f0035000a000500040100007b00000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b00020100002300003374000000100021001f0568322d313408737064792f332e3106737064792f3308687474702f312e31000500050100000000000d0012001004010501020104030503020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
Remove FTP as a "service" from Firefox' client simulation ... as firefox never supported FTP over TLS or SSL, see https://bugzilla.mozilla.org/show_bug.cgi?id=85464 In general browsers tend to remove noaways cleartext FTP from browsers.
2020-01-13 23:11:59 +01:00
service+=("HTTP")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 37 OS X")
short+=("firefox_37_osx")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100c6010000c20303559dff0127b42a68e274b8fc4b53c406200a28b8fb4d054274cc565a162b2cf4000016c02bc02fc00ac009c013c01400330039002f0035000a0100008300000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b0002010000230000337400000010002900270568322d31360568322d31350568322d313402683208737064792f332e3108687474702f312e31000500050100000000000d0012001004010501020104030503020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
Remove FTP as a "service" from Firefox' client simulation ... as firefox never supported FTP over TLS or SSL, see https://bugzilla.mozilla.org/show_bug.cgi?id=85464 In general browsers tend to remove noaways cleartext FTP from browsers.
2020-01-13 23:11:59 +01:00
service+=("HTTP")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 39 OS X")
short+=("firefox_39_osx")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100ca010000c60303efbbb1f18b9dd3e9fcf18cd01a52c517a47f65675e10f9492b6ec337885e8f4a000016c02bc02fc00ac009c013c01400330039002f0035000a0100008700000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b0002010000230000337400000010002900270568322d31360568322d31350568322d313402683208737064792f332e3108687474702f312e31000500050100000000000d001600140401050106010201040305030603020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
Remove FTP as a "service" from Firefox' client simulation ... as firefox never supported FTP over TLS or SSL, see https://bugzilla.mozilla.org/show_bug.cgi?id=85464 In general browsers tend to remove noaways cleartext FTP from browsers.
2020-01-13 23:11:59 +01:00
service+=("HTTP")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
minDhBits+=(1023)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 41 OS X")
short+=("firefox_41_osx")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100b8010000b403037cc4fdb0a8ca09368879a9089201137186ba8a19cc56a83aa7b5db776e7cf936000016c02bc02fc00ac009c013c01400330039002f0035000a0100007500000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b00020100002300003374000000100017001502683208737064792f332e3108687474702f312e31000500050100000000000d001600140401050106010201040305030603020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
Remove FTP as a "service" from Firefox' client simulation ... as firefox never supported FTP over TLS or SSL, see https://bugzilla.mozilla.org/show_bug.cgi?id=85464 In general browsers tend to remove noaways cleartext FTP from browsers.
2020-01-13 23:11:59 +01:00
service+=("HTTP")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
minDhBits+=(1023)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 42 OS X")
short+=("firefox_42_osx")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100b8010000b403038abe51f10e414011c88d4807c3cf465ae02ba1ef74dd1d59a0b8f04c4f13c969000016c02bc02fc00ac009c013c01400330039002f0035000a0100007500000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b00020100002300003374000000100017001502683208737064792f332e3108687474702f312e31000500050100000000000d001600140401050106010201040305030603020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
Remove FTP as a "service" from Firefox' client simulation ... as firefox never supported FTP over TLS or SSL, see https://bugzilla.mozilla.org/show_bug.cgi?id=85464 In general browsers tend to remove noaways cleartext FTP from browsers.
2020-01-13 23:11:59 +01:00
service+=("HTTP")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
minDhBits+=(1023)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 44 OS X")
short+=("firefox_44_osx")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100b8010000b403038d3e6929d322af321fc324639a0adf67c7f8e798b4b74e7ec1627fca71a76fbb000016c02bc02fc00ac009c013c01400330039002f0035000a0100007500000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b00020100002300003374000000100017001502683208737064792f332e3108687474702f312e31000500050100000000000d001600140401050106010201040305030603020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
Remove FTP as a "service" from Firefox' client simulation ... as firefox never supported FTP over TLS or SSL, see https://bugzilla.mozilla.org/show_bug.cgi?id=85464 In general browsers tend to remove noaways cleartext FTP from browsers.
2020-01-13 23:11:59 +01:00
service+=("HTTP")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
minDhBits+=(1023)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 45 Win 7")
short+=("firefox_45_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100d8010000d40303c45b58b30c163444fbca2e8a1832e5a36999712fa83d7ff6b6c13d5a22181e7f205fd10ae0807128c0c0ede2914316ac6b777e529c1f0e89c849cdf0cbde26efa00016c02bc02fc00ac009c013c01400330039002f0035000a0100007500000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b00020100002300003374000000100017001502683208737064792f332e3108687474702f312e31000500050100000000000d001600140401050106010201040305030603020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
Remove FTP as a "service" from Firefox' client simulation ... as firefox never supported FTP over TLS or SSL, see https://bugzilla.mozilla.org/show_bug.cgi?id=85464 In general browsers tend to remove noaways cleartext FTP from browsers.
2020-01-13 23:11:59 +01:00
service+=("HTTP")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
minDhBits+=(1023)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 46 Win 7")
short+=("firefox_46_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100bc010000b8030332260ce2eccf67fb7444d64dcefb92a46e78801f135fe4d44acc1052af1b56b2000016c02bc02fc00ac009c013c01400330039002f0035000a0100007900000014001200000f6465762e73736c6c6162732e636f6d00170000ff01000100000a00080006001700180019000b00020100002300003374000000100017001502683208737064792f332e3108687474702f312e31000500050100000000000d001600140401050106010201040305030603020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
Remove FTP as a "service" from Firefox' client simulation ... as firefox never supported FTP over TLS or SSL, see https://bugzilla.mozilla.org/show_bug.cgi?id=85464 In general browsers tend to remove noaways cleartext FTP from browsers.
2020-01-13 23:11:59 +01:00
service+=("HTTP")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
minDhBits+=(1023)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Firefox 47 Win 7")
short+=("firefox_47_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100c0010000bc0303d6566247c62e11fa1426d88ff5069e8c438d8c0750348f913506d46c24e6204100001ac02bc02fcca9cca8c00ac009c013c01400330039002f0035000a0100007900000014001200000f6465762e73736c6c6162732e636f6d00170000ff01000100000a00080006001700180019000b00020100002300003374000000100017001502683208737064792f332e3108687474702f312e31000500050100000000000d001600140401050106010201040305030603020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
Remove FTP as a "service" from Firefox' client simulation ... as firefox never supported FTP over TLS or SSL, see https://bugzilla.mozilla.org/show_bug.cgi?id=85464 In general browsers tend to remove noaways cleartext FTP from browsers.
2020-01-13 23:11:59 +01:00
service+=("HTTP")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
minDhBits+=(1023)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
names+=("Firefox 49 Win 7")
short+=("firefox_49_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
handshakebytes+=("16030100e6010000e20303129162aca1f789ad3a792eaa766ba345770bbf2eb466e80bb51c3da72a29f95420b4419268602b765f6f206b948f9e6561cdd1f43606a44dc6fb2448862e26fc50001ec02bc02fcca9cca8c02cc030c00ac009c013c01400330039002f0035000a0100007b00000014001200000f6465762e73736c6c6162732e636f6d00170000ff01000100000a00080006001700180019000b00020100002300003374000000100017001502683208737064792f332e3108687474702f312e31000500050100000000000d0018001604010501060102010403050306030203050204020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
Remove FTP as a "service" from Firefox' client simulation ... as firefox never supported FTP over TLS or SSL, see https://bugzilla.mozilla.org/show_bug.cgi?id=85464 In general browsers tend to remove noaways cleartext FTP from browsers.
2020-01-13 23:11:59 +01:00
service+=("HTTP")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
minDhBits+=(1023)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
names+=("Firefox 49 XP SP3")
short+=("firefox_49_xpsp3")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
handshakebytes+=("16030100c6010000c20303655bcc0742ffca05df48e52838a668733165388e09df153a44cbdc7c39c0bb4300001ec02bc02fcca9cca8c02cc030c00ac009c013c01400330039002f0035000a0100007b00000014001200000f6465762e73736c6c6162732e636f6d00170000ff01000100000a00080006001700180019000b00020100002300003374000000100017001502683208737064792f332e3108687474702f312e31000500050100000000000d0018001604010501060102010403050306030203050204020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
Remove FTP as a "service" from Firefox' client simulation ... as firefox never supported FTP over TLS or SSL, see https://bugzilla.mozilla.org/show_bug.cgi?id=85464 In general browsers tend to remove noaways cleartext FTP from browsers.
2020-01-13 23:11:59 +01:00
service+=("HTTP")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
minDhBits+=(1023)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
current+=(false)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
names+=("Firefox 53 Win 7")
short+=("firefox_53_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("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")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
Fix incorrect client simulation data In the data provided by https://api.dev.ssllabs.com/api/v3/getClients, Chrome 57 Win 7 and Firefox 53 Win 7 send ClientHellos that indicate support for TLSv1.3 draft 18, but the highest_protocol for each of these is specified as 0x0303. The result is that if the server being tested supports TLSV1.3 draft 18, `run_client_simulation()` will incorrectly report "No connection" for these servers since the DETECTED_TLS_VERSION (0x0304) will be higher than the specified highest_protocol. This PR fixes the problem by changing the highest_protocol to 0x0304. Note that another solution to this problem would be to change the ClientHello messages for these two browsers. It is my understanding that TLSv1.3 is disabled by default for these browsers, so presumably the ClientHello messages would not specify TLSv1.3 support if they were configured with TLSv1.3 support disabled.
2017-10-03 22:34:56 +02:00
highest_protocol+=("0x0304")
Remove FTP as a "service" from Firefox' client simulation ... as firefox never supported FTP over TLS or SSL, see https://bugzilla.mozilla.org/show_bug.cgi?id=85464 In general browsers tend to remove noaways cleartext FTP from browsers.
2020-01-13 23:11:59 +01:00
service+=("HTTP")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
minDhBits+=(1023)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("X25519:prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
Updated client simulation SSLabs API only added one newer version of Chrome (70) and one newer version of Firefox (62). Thus the wishlist gets longer (c15e0425dcb4ba95cab471d77b6aba70ef7a9712). Missing is Android 8 and 9, OpenSSL 1.1.1, Safari on OSX 11 and 12. Java 10 and 11. Fix #1104
2018-11-05 22:47:28 +01:00
current+=(false)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
names+=("Firefox 59 Win 7")
short+=("firefox_59_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
ciphersuites+=("TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
warning+=("")
handshakebytes+=("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")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
highest_protocol+=("0x0304")
Remove FTP as a "service" from Firefox' client simulation ... as firefox never supported FTP over TLS or SSL, see https://bugzilla.mozilla.org/show_bug.cgi?id=85464 In general browsers tend to remove noaways cleartext FTP from browsers.
2020-01-13 23:11:59 +01:00
service+=("HTTP")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
minDhBits+=(1023)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("X25519:prime256v1:secp384r1:secp521r1")
requiresSha2+=(false)
Add a few MS client hellos * Edge 17 Win 10 * Firefox 66 Win 10 Disable 'Edge 13 Win Phone 10' per default and 'Firefox 62 Win 7'.
2019-04-23 10:32:17 +02:00
current+=(false)
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
Updated client simulation SSLabs API only added one newer version of Chrome (70) and one newer version of Firefox (62). Thus the wishlist gets longer (c15e0425dcb4ba95cab471d77b6aba70ef7a9712). Missing is Android 8 and 9, OpenSSL 1.1.1, Safari on OSX 11 and 12. Java 10 and 11. Fix #1104
2018-11-05 22:47:28 +01:00
names+=("Firefox 62 Win 7")
short+=("firefox_62_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Updated client simulation SSLabs API only added one newer version of Chrome (70) and one newer version of Firefox (62). Thus the wishlist gets longer (c15e0425dcb4ba95cab471d77b6aba70ef7a9712). Missing is Android 8 and 9, OpenSSL 1.1.1, Safari on OSX 11 and 12. Java 10 and 11. Fix #1104
2018-11-05 22:47:28 +01:00
ciphersuites+=("TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
Updated client simulation SSLabs API only added one newer version of Chrome (70) and one newer version of Firefox (62). Thus the wishlist gets longer (c15e0425dcb4ba95cab471d77b6aba70ef7a9712). Missing is Android 8 and 9, OpenSSL 1.1.1, Safari on OSX 11 and 12. Java 10 and 11. Fix #1104
2018-11-05 22:47:28 +01:00
warning+=("")
handshakebytes+=("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")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
highest_protocol+=("0x0304")
Remove FTP as a "service" from Firefox' client simulation ... as firefox never supported FTP over TLS or SSL, see https://bugzilla.mozilla.org/show_bug.cgi?id=85464 In general browsers tend to remove noaways cleartext FTP from browsers.
2020-01-13 23:11:59 +01:00
service+=("HTTP")
Updated client simulation SSLabs API only added one newer version of Chrome (70) and one newer version of Firefox (62). Thus the wishlist gets longer (c15e0425dcb4ba95cab471d77b6aba70ef7a9712). Missing is Android 8 and 9, OpenSSL 1.1.1, Safari on OSX 11 and 12. Java 10 and 11. Fix #1104
2018-11-05 22:47:28 +01:00
minDhBits+=(1023)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("X25519:prime256v1:secp384r1:secp521r1")
requiresSha2+=(false)
Add firefox 71 ... and * deprecate openssl 1.0.1 * enable Chrome 74 instead of Chrome 65
2020-01-13 22:57:10 +01:00
current+=(false)
Updated client simulation SSLabs API only added one newer version of Chrome (70) and one newer version of Firefox (62). Thus the wishlist gets longer (c15e0425dcb4ba95cab471d77b6aba70ef7a9712). Missing is Android 8 and 9, OpenSSL 1.1.1, Safari on OSX 11 and 12. Java 10 and 11. Fix #1104
2018-11-05 22:47:28 +01:00
Add a few MS client hellos * Edge 17 Win 10 * Firefox 66 Win 10 Disable 'Edge 13 Win Phone 10' per default and 'Firefox 62 Win 7'.
2019-04-23 10:32:17 +02:00
names+=("Firefox 66 (Win 8.1/10)")
Add client simulations .. for Android 8.1 and Firefox 66. Add ciphersuites to the existing handshakes and update the documentation accordingly.
2019-04-20 20:21:25 +02:00
short+=("firefox_66_win81")
Add Java 17 LTS plus * amend documentation * remove TLS 1.3 ciphers in ch_ciphers for consistency reasons
2022-05-04 15:46:36 +02:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Add client simulations .. for Android 8.1 and Firefox 66. Add ciphersuites to the existing handshakes and update the documentation accordingly.
2019-04-20 20:21:25 +02:00
ciphersuites+=("TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
Add client simulations .. for Android 8.1 and Firefox 66. Add ciphersuites to the existing handshakes and update the documentation accordingly.
2019-04-20 20:21:25 +02:00
warning+=("")
handshakebytes+=("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")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_3 -tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
highest_protocol+=("0x0304")
alpn+=("h2,http/1.1")
Remove FTP as a "service" from Firefox' client simulation ... as firefox never supported FTP over TLS or SSL, see https://bugzilla.mozilla.org/show_bug.cgi?id=85464 In general browsers tend to remove noaways cleartext FTP from browsers.
2020-01-13 23:11:59 +01:00
service+=("HTTP")
Add client simulations .. for Android 8.1 and Firefox 66. Add ciphersuites to the existing handshakes and update the documentation accordingly.
2019-04-20 20:21:25 +02:00
minDhBits+=(1023)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("X25519:secp256r1:secp384r1:secp521r1:ffdhe2048:ffdhe3072")
requiresSha2+=(false)
current+=(true)
Add firefox 71 ... and * deprecate openssl 1.0.1 * enable Chrome 74 instead of Chrome 65
2020-01-13 22:57:10 +01:00
names+=("Firefox 71 (Win 10)")
short+=("firefox_71_win10")
Add Java 17 LTS plus * amend documentation * remove TLS 1.3 ciphers in ch_ciphers for consistency reasons
2022-05-04 15:46:36 +02:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Add firefox 71 ... and * deprecate openssl 1.0.1 * enable Chrome 74 instead of Chrome 65
2020-01-13 22:57:10 +01:00
ciphersuites+=("TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
Add firefox 71 ... and * deprecate openssl 1.0.1 * enable Chrome 74 instead of Chrome 65
2020-01-13 22:57:10 +01:00
warning+=("")
handshakebytes+=("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")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_3 -tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
highest_protocol+=("0x0304")
alpn+=("h2,http/1.1")
Remove FTP as a "service" from Firefox' client simulation ... as firefox never supported FTP over TLS or SSL, see https://bugzilla.mozilla.org/show_bug.cgi?id=85464 In general browsers tend to remove noaways cleartext FTP from browsers.
2020-01-13 23:11:59 +01:00
service+=("HTTP")
Add client simulations .. for Android 8.1 and Firefox 66. Add ciphersuites to the existing handshakes and update the documentation accordingly.
2019-04-20 20:21:25 +02:00
minDhBits+=(1023)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("X25519:secp256r1:secp384r1:secp521r1:ffdhe2048:ffdhe3072")
requiresSha2+=(false)
Firefox 100, Chrom and Edge 101 (Win10) - disabled Opera (too old) - disabled ATS 9 / iOS 9 - reenabled Android 8.1
2022-05-09 17:49:16 +02:00
current+=(false)
names+=("Firefox 100 (Win 10)")
short+=("firefox_100_win10")
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA")
ciphersuites+=("TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384")
ch_sni+=("$SNI")
warning+=("")
handshakebytes+=("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")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_3 -tls1_2")
lowest_protocol+=("0x0303")
highest_protocol+=("0x0304")
alpn+=("h2,http/1.1")
service+=("HTTP")
minDhBits+=(1023)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("X25519:secp256r1:secp384r1:secp521r1:ffdhe2048:ffdhe3072")
requiresSha2+=(false)
Add client simulations .. for Android 8.1 and Firefox 66. Add ciphersuites to the existing handshakes and update the documentation accordingly.
2019-04-20 20:21:25 +02:00
current+=(true)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
names+=("IE 6 XP")
short+=("ie_6_xp")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("RC4-MD5:RC4-SHA:DES-CBC3-SHA:RC4-MD5:DES-CBC3-MD5:RC2-CBC-MD5:DES-CBC-SHA:DES-CBC-MD5:EXP1024-RC4-SHA:EXP1024-DES-CBC-SHA:EXP-RC4-MD5:EXP-RC2-CBC-MD5:EXP-RC4-MD5:EXP-RC2-CBC-MD5:EDH-DSS-DES-CBC3-SHA:EDH-DSS-DES-CBC-SHA:EXP1024-DHE-DSS-DES-CBC-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("804f01030000360000001000000400000500000a0100800700c00300800000090600400000640000620000030000060200800400800000130000120000630000ffd9f61eed63ba552d0bca94dc016081a3")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_tls1")
tlsvers+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0200")
highest_protocol+=("0x0300")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("IE 7 Vista")
short+=("ie_7_vista")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-DSS-AES128-SHA:DHE-DSS-AES256-SHA:EDH-DSS-DES-CBC3-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("160301007d01000079030151fa62ab452795b7003c5f93ab677dbf57dd62bfa39e0ffaaeabe45b06552452000018002f00350005000ac009c00ac013c01400320038001300040100003800000014001200000f7777772e73736c6c6162732e636f6d000500050100000000000a00080006001700180019000b00020100ff01000100")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
Deprecation of more clients * Tor 17 * Android 4.2.2 * IE 7 Vista
2019-05-08 23:12:45 +02:00
current+=(false)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
names+=("IE 8-10 Win 7")
short+=("ie_8-10_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:AES256-SHA:AES128-SHA:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:DHE-DSS-AES256-SHA:DHE-DSS-AES128-SHA:DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("160301007d01000079030155f092059b76ac28cceda732dac7f07a52aecc126f8ed890ab80e12e7eca049c000018c014c0130035002fc00ac00900380032000a0013000500040100003800000014001200000f6465762e73736c6c6162732e636f6d000500050100000000000a00080006001700180019000b00020100ff01000100")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(4096)
minRsaBits+=(-1)
maxRsaBits+=(16384)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("IE 8 Win 7")
short+=("ie_8_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA:DHE-DSS-AES128-SHA:DHE-DSS-AES256-SHA:EDH-DSS-DES-CBC3-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("160301007b01000077030151facea9bfdefb38bc40987322ebdc092498fc6e64e491683abd95179ea8405c000018002f00350005000ac013c014c009c00a003200380013000401000036ff0100010000000014001200000f7777772e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
names+=("IE 8 XP")
short+=("ie_8_xp")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("RC4-MD5:RC4-SHA:DES-CBC3-SHA:DES-CBC-SHA:EXP1024-RC4-SHA:EXP1024-DES-CBC-SHA:EXP-RC4-MD5:EXP-RC2-CBC-MD5:EDH-DSS-DES-CBC3-SHA:EDH-DSS-DES-CBC-SHA:EXP1024-DHE-DSS-DES-CBC-SHA")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
warning+=("")
handshakebytes+=("1603010048010000440301550bf46d2cff1997bd24885e963ba61faa8be6c28835c1f9bf74c1675cd3cf8500001600040005000a0009006400620003000600130012006301000005ff01000100")
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("")
requiresSha2+=(false)
current+=(true)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
names+=("IE 9 Win 7")
short+=("ie_9_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA:DHE-DSS-AES128-SHA:DHE-DSS-AES256-SHA:EDH-DSS-DES-CBC3-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("160301007b01000077030151facc6695164fc3429414f5926b8d794b56dcb2e1e45825575ed12406fd8cf5000018002f00350005000ac013c014c009c00a003200380013000401000036ff0100010000000014001200000f7777772e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("IE 10 Win Phone 8.0")
short+=("ie_10_winphone80")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA:DHE-DSS-AES128-SHA:DHE-DSS-AES256-SHA:EDH-DSS-DES-CBC3-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("160301007f0100007b0301536487d458b1a364f27085798ca9e06353f0b300baeecd775e6ccc90a97037c2000018002f00350005000ac013c014c009c00a00320038001300040100003aff0100010000000014001200000f7777772e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b0002010000230000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("IE 11 Win 7")
short+=("ie_11_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:DHE-DSS-AES256-SHA256:DHE-DSS-AES128-SHA256:DHE-DSS-AES256-SHA:DHE-DSS-AES128-SHA:DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030300af010000ab03035954cc4cf4eaf6c39a501d311bc340fcbeab6b52a25defdc40e83a2699791c4f000030c028c027c014c013009f009e009d009c003d003c0035002fc02cc02bc024c023c00ac009006a004000380032000a00130100005200000014001200000f6465762e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100000d0014001206010603040105010201040305030203020200170000ff01000100")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(4096)
minRsaBits+=(-1)
maxRsaBits+=(16384)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("IE 11 Win 8.1")
short+=("ie_11_win81")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:DHE-DSS-AES256-SHA256:DHE-DSS-AES128-SHA256:DHE-DSS-AES256-SHA:DHE-DSS-AES128-SHA:DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030300d1010000cd0303576c36e03bf1afe8d81100c68adc72bd0c678a5162275a5569651875123a7bec000034c028c027c014c013009f009e00390033009d009c003d003c0035002fc02cc02bc024c023c00ac009006a004000380032000a00130100007000000014001200000f6465762e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100000d001400120401050106010201040305030603020302020023000000100012001006737064792f3308687474702f312e313374000000170000ff01000100")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(4096)
minRsaBits+=(-1)
maxRsaBits+=(16384)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("IE 11 Win Phone 8.1")
short+=("ie_11_winphone81")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("AES128-SHA256:AES128-SHA:AES256-SHA256:AES256-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA:DHE-DSS-AES128-SHA256:DHE-DSS-AES128-SHA:DHE-DSS-AES256-SHA256:DHE-DSS-AES256-SHA:EDH-DSS-DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030300bb010000b703035363d297ad92a8fe276a4e5b9395d593e96fff9c3df0987e5dfbab544ce05832000026003c002f003d0035000ac027c013c014c02bc023c02cc024c009c00a00400032006a0038001301000068ff0100010000000014001200000f7777772e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100000d0010000e04010501020104030503020302020023000000100012001006737064792f3308687474702f312e3133740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
current+=(true)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
names+=("IE 11 Win Phone 8.1 Update")
short+=("ie_11_winphone81update")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:DHE-DSS-AES256-SHA256:DHE-DSS-AES128-SHA256:DHE-DSS-AES256-SHA:DHE-DSS-AES128-SHA:DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030300c5010000c103035537a79a55362d42c3b3308fea91e85c5656021153d0a4baf03e7fef6e315c72000030c028c027c014c013009f009e009d009c003d003c0035002fc02cc02bc024c023c00ac009006a004000380032000a001301000068ff0100010000000014001200000f6465762e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100000d0010000e04010501020104030503020302020023000000100012001006737064792f3308687474702f312e3133740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
current+=(false)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
names+=("IE 11 Win 10")
short+=("ie_11_win10")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:DHE-DSS-AES256-SHA256:DHE-DSS-AES128-SHA256:DHE-DSS-AES256-SHA:DHE-DSS-AES128-SHA:EDH-DSS-DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030300d7010000d30303576c3861086a497dbb46489b67a88ac2e541c4863147fd09634bd0c630b73e92000038c02cc02bc030c02f009f009ec024c023c028c027c00ac009c014c01300390033009d009c003d003c0035002f000a006a00400038003200130100007200000014001200000f6465762e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100000d00140012040105010201040305030203020206010603002300000010000e000c02683208687474702f312e310017000055000006000100020002ff01000100")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(4096)
minRsaBits+=(-1)
maxRsaBits+=(16384)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("IE 11 Win 10 Preview")
short+=("ie_11_win10preview")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:DHE-DSS-AES256-SHA256:DHE-DSS-AES128-SHA256:DHE-DSS-AES256-SHA:DHE-DSS-AES128-SHA:DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030300BF010000BB0303542C787B4571BC82C90182FCA70DE4903C2A6AD38F7541731DBC8117A27ED8E4000034C030C02FC028C027C014C013009F009E009D009C003D003C0035002FC02CC02BC024C023C00AC009006A004000380032000A00130100005EFF010001000000000F000D00000A62617964656E2E636F6D000500050100000000000A0006000400170018000B00020100000D0010000E04010501020104030503020302020023000000100011000F0568322D313408687474702F312E31")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Edge 12 Win 10")
short+=("edge_12_win10")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:DHE-DSS-AES256-SHA256:DHE-DSS-AES128-SHA256:DHE-DSS-AES256-SHA:DHE-DSS-AES128-SHA:DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030300c9010000c50303558923f4d57c2d79aba0360f4030073f0554d057176bd610fb2aa74ee4407361000034c030c02fc028c027c014c013009f009e009d009c003d003c0035002fc02cc02bc024c023c00ac009006a004000380032000a00130100006800000014001200000f6465762e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100000d00140012040105010201040305030203020206010603002300000010000e000c02683208687474702f312e3100170000ff01000100")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(4096)
minRsaBits+=(-1)
maxRsaBits+=(16384)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Edge 13 Win 10")
short+=("edge_13_win10")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:DHE-DSS-AES256-SHA256:DHE-DSS-AES128-SHA256:DHE-DSS-AES256-SHA:DHE-DSS-AES128-SHA:EDH-DSS-DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030300d7010000d30303576c36d45fdcc8fdee4c62a86ccb3c116eaf6ba23d0726162972e953b993a96a000038c02cc02bc030c02f009f009ec024c023c028c027c00ac009c014c01300390033009d009c003d003c0035002f000a006a00400038003200130100007200000014001200000f6465762e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100000d00140012040105010201040305030203020206010603002300000010000e000c02683208687474702f312e310017000055000006000100020002ff01000100")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(4096)
minRsaBits+=(-1)
maxRsaBits+=(16384)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
Add a few MS client hellos * Edge 17 Win 10 * Firefox 66 Win 10 Disable 'Edge 13 Win Phone 10' per default and 'Firefox 62 Win 7'.
2019-04-23 10:32:17 +02:00
current+=(false)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
names+=("Edge 13 Win Phone 10")
short+=("edge_13_winphone10")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:DHE-DSS-AES256-SHA256:DHE-DSS-AES128-SHA256:DHE-DSS-AES256-SHA:DHE-DSS-AES128-SHA:EDH-DSS-DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030300d3010000cf0303565ee836e62e7b9b734f4dca5f3f1ad62dc4e5f87bdf6c90f325b6a2e0012705000034c02cc02bc030c02f009f009ec024c023c028c027c00ac009c014c013009d009c003d003c0035002f000a006a00400038003200130100007200000014001200000f6465762e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100000d00140012040105010201040305030203020206010603002300000010000e000c02683208687474702f312e310017000055000006000100020002ff01000100")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(4096)
minRsaBits+=(-1)
maxRsaBits+=(16384)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
Add a few MS client hellos * Edge 17 Win 10 * Firefox 66 Win 10 Disable 'Edge 13 Win Phone 10' per default and 'Firefox 62 Win 7'.
2019-04-23 10:32:17 +02:00
current+=(false)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
names+=("Edge 15 Win 10")
short+=("edge_15_win10")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
warning+=("")
handshakebytes+=("16030300c7010000c303035a72ab502215e916a98bf9cf7392b4770a76d76d49338c253d054f463514d52b000026c02cc02bc030c02fc024c023c028c027c00ac009c014c013009d009c003d003c0035002f000a0100007400000014001200000f6465762e73736c6c6162732e636f6d000500050100000000000a00080006001d00170018000b00020100000d00140012040105010201040305030203020206010603002300000010000e000c02683208687474702f312e310017000000180006000a03020100ff01000100")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(4096)
minRsaBits+=(-1)
maxRsaBits+=(16384)
minEcdsaBits+=(-1)
curves+=("X25519:prime256v1:secp384r1")
requiresSha2+=(false)
current+=(true)
Add a few MS client hellos * Edge 17 Win 10 * Firefox 66 Win 10 Disable 'Edge 13 Win Phone 10' per default and 'Firefox 62 Win 7'.
2019-04-23 10:32:17 +02:00
names+=("Edge 17 (Win 10)")
short+=("edge_17_win10")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA")
Add a few MS client hellos * Edge 17 Win 10 * Firefox 66 Win 10 Disable 'Edge 13 Win Phone 10' per default and 'Firefox 62 Win 7'.
2019-04-23 10:32:17 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
Add a few MS client hellos * Edge 17 Win 10 * Firefox 66 Win 10 Disable 'Edge 13 Win Phone 10' per default and 'Firefox 62 Win 7'.
2019-04-23 10:32:17 +02:00
warning+=("")
handshakebytes+=("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")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
alpn+=("h2,http/1.1")
service+=("HTTP,FTP")
minDhBits+=(1024)
maxDhBits+=(4096)
minRsaBits+=(-1)
maxRsaBits+=(16384)
minEcdsaBits+=(-1)
curves+=("X25519:secp256r1:secp384r1")
requiresSha2+=(false)
Firefox 100, Chrom and Edge 101 (Win10) - disabled Opera (too old) - disabled ATS 9 / iOS 9 - reenabled Android 8.1
2022-05-09 17:49:16 +02:00
current+=(false)
names+=("Edge 101 Win 10 21H2")
short+=("edge_101_win10_21h2")
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA")
ciphersuites+=("TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256")
ch_sni+=("$SNI")
warning+=("")
handshakebytes+=("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")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_3 -tls1_2")
lowest_protocol+=("0x0303")
highest_protocol+=("0x0304")
alpn+=("h2,http/1.1")
service+=("HTTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(16384)
minEcdsaBits+=(-1)
curves+=("X25519:secp256r1:secp384r1")
requiresSha2+=(true)
Add a few MS client hellos * Edge 17 Win 10 * Firefox 66 Win 10 Disable 'Edge 13 Win Phone 10' per default and 'Firefox 62 Win 7'.
2019-04-23 10:32:17 +02:00
current+=(true)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
names+=("Opera 12.15 Win 7")
short+=("opera_1215_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA256:DH-RSA-AES256-SHA256:DH-DSS-AES256-SHA256:AES256-SHA256:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:DH-RSA-AES256-SHA:DH-DSS-AES256-SHA:AES256-SHA:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA256:DH-RSA-AES128-SHA256:DH-DSS-AES128-SHA256:AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DH-RSA-AES128-SHA:DH-DSS-AES128-SHA:AES128-SHA:RC4-SHA:RC4-MD5:EDH-DSS-DES-CBC3-SHA:DH-DSS-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:DH-RSA-DES-CBC3-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("160301008d01000089030151d15a838169aa7a0158e2e9dd53397bec509ab4135d83fc3e8457b4322332e3000036006b006a00690068003d0039003800370036003500670040003f003e003c0033003200310030002f000500040013000d00160010000a0100002a00000014001200000f7777772e73736c6c6162732e636f6dff0100010000050005010000000033740000")
protos+=("-tls1")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
tlsvers+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Opera 15 Win 7")
short+=("opera_15_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:CAMELLIA256-SHA:AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:DHE-DSS-RC4-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-AES128-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-AES128-SHA:SEED-SHA:CAMELLIA128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100b9010000b5030251fa313df3fb4ade87369b14f89da7776406dc1cfd7bbf08fff0bbb0ef2f5da4000048c00ac0140088008700390038c00fc00500840035c007c009c011c01300450044006600330032c00cc00ec002c0040096004100050004002fc008c01200160013c00dc003feff000a0100004400000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000754f0000000500050100000000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_ssl2")
tlsvers+=("-tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0302")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Opera 16 Win 7")
short+=("opera_16_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA256:AES256-SHA:AES256-SHA256:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:AES128-SHA256:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("1603010099010000950302524d41d17646ea784e8625eb64a4f5f4c94ad345ad0b4d9d8da570b2db45db64000028c00ac0140039006b0035003dc007c009c023c011c013c02700330067003200050004002f003c000a0100004400000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000754f0000000500050100000000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_ssl2")
tlsvers+=("-tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0302")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(4096)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Opera 17 Win 7")
short+=("opera_17_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA256:AES256-SHA:AES256-SHA256:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:AES128-SHA256:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100d5010000d10303526793c01b8d4859d838c8658f07f895a2f35ba16fb786644db811b856197e9b000028c00ac0140039006b0035003dc007c009c023c011c013c02700330067003200050004002f003c000a0100008000000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b00020100002300003374000000100022002006737064792f3206737064792f3308737064792f332e3108687474702f312e31754f0000000500050100000000000d0012001004010501020104030503020304020202")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(4096)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
Remove opera client simulation ... as it may indicate this is a recent version but version 17 is infact 5,5 years old. If you configure the server side this is misleading!
2019-04-12 18:15:34 +02:00
current+=(false)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
Add Opera 60 + Chrome 73 Chrome 74 update pending
2019-04-23 11:33:47 +02:00
names+=("Opera 60 (Win 10)")
short+=("opera_60_win10")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Add Opera 60 + Chrome 73 Chrome 74 update pending
2019-04-23 11:33:47 +02:00
ciphersuites+=("TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
Add Opera 60 + Chrome 73 Chrome 74 update pending
2019-04-23 11:33:47 +02:00
warning+=("")
handshakebytes+=("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")
protos+=("-no_ssl2")
tlsvers+=("-tls1_3 -tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0300")
highest_protocol+=("0x0304")
alpn+=("h2,http/1.1")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("X25519:secp256r1:secp384r1")
requiresSha2+=(false)
Add recent Chrome and Opera handshakes Chrome 78 and 79, Opera 65 and 66 Remove FTP from Chrome
2020-01-13 16:02:39 +01:00
current+=(false)
names+=("Opera 65 (Win 10)")
short+=("opera_65_win10")
Add Java 17 LTS plus * amend documentation * remove TLS 1.3 ciphers in ch_ciphers for consistency reasons
2022-05-04 15:46:36 +02:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Add recent Chrome and Opera handshakes Chrome 78 and 79, Opera 65 and 66 Remove FTP from Chrome
2020-01-13 16:02:39 +01:00
ciphersuites+=("TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
Add recent Chrome and Opera handshakes Chrome 78 and 79, Opera 65 and 66 Remove FTP from Chrome
2020-01-13 16:02:39 +01:00
warning+=("")
handshakebytes+=("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")
protos+=("-no_ssl2 -no_ssl3")
tlsvers+=("-tls1_3 -tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
highest_protocol+=("0x0304")
alpn+=("h2,http/1.1")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("X25519:secp256r1:secp384r1")
requiresSha2+=(false)
current+=(false)
names+=("Opera 66 (Win 10)")
short+=("opera_66_win10")
Add Java 17 LTS plus * amend documentation * remove TLS 1.3 ciphers in ch_ciphers for consistency reasons
2022-05-04 15:46:36 +02:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Add recent Chrome and Opera handshakes Chrome 78 and 79, Opera 65 and 66 Remove FTP from Chrome
2020-01-13 16:02:39 +01:00
ciphersuites+=("TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
Add recent Chrome and Opera handshakes Chrome 78 and 79, Opera 65 and 66 Remove FTP from Chrome
2020-01-13 16:02:39 +01:00
warning+=("")
handshakebytes+=("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")
protos+=("-no_ssl2 -no_ssl3")
tlsvers+=("-tls1_3 -tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
highest_protocol+=("0x0304")
alpn+=("h2,http/1.1")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("X25519:secp256r1:secp384r1")
requiresSha2+=(false)
Firefox 100, Chrom and Edge 101 (Win10) - disabled Opera (too old) - disabled ATS 9 / iOS 9 - reenabled Android 8.1
2022-05-09 17:49:16 +02:00
current+=(false)
Add Opera 60 + Chrome 73 Chrome 74 update pending
2019-04-23 11:33:47 +02:00
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
names+=("Safari 5.1.9 OS X 10.6.8")
short+=("safari_519_osx1068")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDH-ECDSA-AES128-SHA:ECDH-ECDSA-AES256-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-DES-CBC3-SHA:ECDH-RSA-AES128-SHA:ECDH-RSA-AES256-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-DES-CBC3-SHA:AES128-SHA:RC4-SHA:RC4-MD5:AES256-SHA:DES-CBC3-SHA:DES-CBC-SHA:EXP-RC4-MD5:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:DHE-DSS-AES128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:EDH-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC3-SHA:EDH-DSS-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("160301009d01000099030151d15dc2887b1852fd4291e36c3f4e8a35266e15dd6354779fbf5438b59b42da000046c00ac009c007c008c013c014c011c012c004c005c002c003c00ec00fc00cc00d002f000500040035000a000900030008000600320033003800390016001500140013001200110100002a00000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b00020100")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(4096)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
current+=(false)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
names+=("Safari 5 iOS 5.1.1")
short+=("safari_5_ios511")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDH-ECDSA-AES256-SHA384:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES256-SHA384:ECDH-RSA-AES128-SHA256:ECDH-ECDSA-AES128-SHA:ECDH-ECDSA-AES256-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-DES-CBC3-SHA:ECDH-RSA-AES128-SHA:ECDH-RSA-AES256-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-DES-CBC3-SHA:AES256-SHA256:AES128-SHA256:AES128-SHA:RC4-SHA:RC4-MD5:AES256-SHA:DES-CBC3-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:EDH-RSA-DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030300b1010000ad030351d15d7aa4e0bca9cfe5971857ba54d3c9c1f96ecbb8aae4d4cd94e7dbbefef800004a00ffc024c023c00ac009c007c008c028c027c014c013c011c012c026c025c02ac029c004c005c002c003c00ec00fc00cc00d003d003c002f000500040035000a0067006b0033003900160100003a00000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d000c000a05010401020104030203")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(4096)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Safari 6.0.4 OS X 10.8.4")
short+=("safari_604_osx1084")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDH-ECDSA-AES128-SHA:ECDH-ECDSA-AES256-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-DES-CBC3-SHA:ECDH-RSA-AES128-SHA:ECDH-RSA-AES256-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-DES-CBC3-SHA:AES128-SHA:RC4-SHA:RC4-MD5:AES256-SHA:DES-CBC3-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:EDH-RSA-DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100a9010000a5030151fa327c6576dadde1e8a89d4d45bdc1d0c107b8cbe998337e02ca419a0bcb30204dd1c85d9fbc1607b27a35ec9dfd1dae2c589483843a73999c9de205748633b1003200ffc00ac009c007c008c014c013c011c012c004c005c002c003c00ec00fc00cc00d002f000500040035000a0033003900160100002a00000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b00020100")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(4096)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Safari 6 iOS 6.0.1")
short+=("safari_6_ios601")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDH-ECDSA-AES256-SHA384:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES256-SHA384:ECDH-RSA-AES128-SHA256:ECDH-ECDSA-AES128-SHA:ECDH-ECDSA-AES256-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-DES-CBC3-SHA:ECDH-RSA-AES128-SHA:ECDH-RSA-AES256-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-DES-CBC3-SHA:AES256-SHA256:AES128-SHA256:AES128-SHA:RC4-SHA:RC4-MD5:AES256-SHA:DES-CBC3-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:EDH-RSA-DES-CBC3-SHA:ECDHE-ECDSA-NULL-SHA:ECDHE-RSA-NULL-SHA:ECDH-ECDSA-NULL-SHA:ECDH-RSA-NULL-SHA:NULL-SHA256:NULL-SHA:NULL-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030300bf010000bb030351d15ce21834380a8b5f491a00790b6d097014bb1e04124706631c6a6a3f973800005800ffc024c023c00ac009c007c008c028c027c014c013c011c012c026c025c02ac029c004c005c002c003c00ec00fc00cc00d003d003c002f000500040035000a0067006b003300390016c006c010c001c00b003b000200010100003a00000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d000c000a05010401020104030203")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(4096)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Safari 7 iOS 7.1")
short+=("safari_7_ios71")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDH-ECDSA-AES256-SHA384:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES256-SHA384:ECDH-RSA-AES128-SHA256:ECDH-ECDSA-AES256-SHA:ECDH-ECDSA-AES128-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-DES-CBC3-SHA:ECDH-RSA-AES256-SHA:ECDH-RSA-AES128-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-DES-CBC3-SHA:AES256-SHA256:AES128-SHA256:AES128-SHA:RC4-SHA:RC4-MD5:AES256-SHA:DES-CBC3-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:EDH-RSA-DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100b1010000ad0303532017204048bb5331c62bf295ab4c2f2b3964f515c649a7d0947c8102d7348600004a00ffc024c023c00ac009c007c008c028c027c014c013c011c012c026c025c02ac029c005c004c002c003c00fc00ec00cc00d003d003c002f000500040035000a0067006b0033003900160100003a00000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d000c000a05010401020104030203")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(4096)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
current+=(false)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
names+=("Safari 7 OS X 10.9")
short+=("safari_7_osx109")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDH-ECDSA-AES256-SHA384:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES256-SHA384:ECDH-RSA-AES128-SHA256:ECDH-ECDSA-AES256-SHA:ECDH-ECDSA-AES128-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-DES-CBC3-SHA:ECDH-RSA-AES256-SHA:ECDH-RSA-AES128-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-DES-CBC3-SHA:AES256-SHA256:AES128-SHA256:AES128-SHA:RC4-SHA:RC4-MD5:AES256-SHA:DES-CBC3-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:EDH-RSA-DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100d1010000cd030351fa3664edce86d82606540539ccd388418b1a5cb8cfda5e15349c635d4b028b203bf83c63e3da6777e407300b5d657e429f11cd7d857977e4390fda365b8d4664004a00ffc024c023c00ac009c007c008c028c027c014c013c011c012c026c025c02ac029c005c004c002c003c00fc00ec00cc00d003d003c002f000500040035000a0067006b0033003900160100003a00000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d000c000a05010401020104030203")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(4096)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Safari 8 iOS 8.0 Beta")
short+=("safari_8_ios80beta")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDH-ECDSA-AES256-SHA384:ECDH-ECDSA-AES128-SHA256:ECDH-ECDSA-AES256-SHA:ECDH-ECDSA-AES128-SHA:ECDH-ECDSA-DES-CBC3-SHA:ECDH-RSA-AES256-SHA384:ECDH-RSA-AES128-SHA256:ECDH-RSA-AES256-SHA:ECDH-RSA-AES128-SHA:ECDH-RSA-DES-CBC3-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:EDH-RSA-DES-CBC3-SHA:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100b5010000b1030353ad95f2031490cfd60dbda382e916685b09dec1ab8ac0a4b0c9f39e048855ce00004a00ffc024c023c00ac009c008c028c027c014c013c012c026c025c005c004c003c02ac029c00fc00ec00d006b0067003900330016003d003c0035002f000ac007c011c002c00c000500040100003e00000014001200000f6465762e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d000c000a0501040102010403020333740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Safari 8 iOS 8.4")
short+=("safari_8_ios84")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDH-ECDSA-AES256-SHA384:ECDH-ECDSA-AES128-SHA256:ECDH-ECDSA-AES256-SHA:ECDH-ECDSA-AES128-SHA:ECDH-ECDSA-DES-CBC3-SHA:ECDH-RSA-AES256-SHA384:ECDH-RSA-AES128-SHA256:ECDH-RSA-AES256-SHA:ECDH-RSA-AES128-SHA:ECDH-RSA-DES-CBC3-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:EDH-RSA-DES-CBC3-SHA:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100b5010000b1030354c20f1647345d0cac1db29f0489aab5e2016e6b2baca65e8c5eb6dd48a1fcd400004a00ffc024c023c00ac009c008c028c027c014c013c012c026c025c005c004c003c02ac029c00fc00ec00d006b0067003900330016003d003c0035002f000ac007c011c002c00c000500040100003e00000014001200000f6465762e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d000c000a0501040102010403020333740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(768)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(4096)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Safari 8 OS X 10.10")
short+=("safari_8_osx1010")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDH-ECDSA-AES256-SHA384:ECDH-ECDSA-AES128-SHA256:ECDH-ECDSA-AES256-SHA:ECDH-ECDSA-AES128-SHA:ECDH-ECDSA-DES-CBC3-SHA:ECDH-RSA-AES256-SHA384:ECDH-RSA-AES128-SHA256:ECDH-RSA-AES256-SHA:ECDH-RSA-AES128-SHA:ECDH-RSA-DES-CBC3-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:EDH-RSA-DES-CBC3-SHA:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100b5010000b1030354c20a44e0d7681f3d55d7e9a764b67e6ffa6722c17b21e15bc2c9c98892460a00004a00ffc024c023c00ac009c008c028c027c014c013c012c026c025c005c004c003c02ac029c00fc00ec00d006b0067003900330016003d003c0035002f000ac007c011c002c00c000500040100003e00000014001200000f6465762e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d000c000a0501040102010403020333740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(768)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(8192)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Safari 9 iOS 9")
short+=("safari_9_ios9")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100e2010000de030355fb38fdc94c6c1ff6ee066f0e69579f40a83ce5454787e8834b60fd8c31e5ac00003400ffc02cc02bc024c023c00ac009c008c030c02fc028c027c014c013c012009d009c003d003c0035002f000ac007c011000500040100008100000014001200000f6465762e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d000e000c0501040102010503040302033374000000100030002e0268320568322d31360568322d31350568322d313408737064792f332e3106737064792f3308687474702f312e3100050005010000000000120000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(768)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(8192)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
Add Safari for macOS
2022-05-03 22:11:31 +02:00
current+=(false)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
names+=("Safari 9 OS X 10.11")
short+=("safari_9_osx1011")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100e2010000de030355def1c4d1f6a12227389012da236581104b0bfa8b8a5bc849372531349dccc600003400ffc02cc02bc024c023c00ac009c008c030c02fc028c027c014c013c012009d009c003d003c0035002f000ac007c011000500040100008100000014001200000f6465762e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d000e000c0501040102010503040302033374000000100030002e0268320568322d31360568322d31350568322d313408737064792f332e3106737064792f3308687474702f312e3100050005010000000000120000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(768)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(8192)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
Add Safari for macOS
2022-05-03 22:11:31 +02:00
current+=(false)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
names+=("Safari 10 iOS 10")
short+=("safari_10_ios10")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100e2010000de030357f20123e3e60449eadcfacc873a02c3e71adcb47fd5634ec2fd49ccf99f13c500002c00ffc02cc02bc024c023c00ac009c008c030c02fc028c027c014c013c012009d009c003d003c0035002f000a0100008900000014001200000f6465762e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d00120010040102010501060104030203050306033374000000100030002e0268320568322d31360568322d31350568322d313408737064792f332e3106737064792f3308687474702f312e310005000501000000000012000000170000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(768)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(8192)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Safari 10 OS X 10.12")
short+=("safari_10_osx1012")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100e2010000de030357fde32ec4b7eb1c967e535ba93d9129ffd6a35fc5d6b14f785205e2a0c7e35600002c00ffc02cc02bc024c023c00ac009c008c030c02fc028c027c014c013c012009d009c003d003c0035002f000a0100008900000014001200000f6465762e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d00120010040102010501060104030203050306033374000000100030002e0268320568322d31360568322d31350568322d313408737064792f332e3106737064792f3308687474702f312e310005000501000000000012000000170000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(768)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(8192)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
disable Java 12 and Safari on OS X 10.12
2022-05-31 12:17:38 +02:00
current+=(false)
Add Safari 12.1 from iOS 12.2 Manually Wiresharked
2019-05-04 00:58:31 +02:00
Fix error + round brackets PR #1260 missed a 'current' line which caused an output problem. I'd like to add round brackets to the displayed name so that we remember what comes from wireshark and waht from SSLlabs
2019-05-04 11:05:57 +02:00
names+=("Safari 12.1 (iOS 12.2)")
Add Safari 12.1 from iOS 12.2 Manually Wiresharked
2019-05-04 00:58:31 +02:00
short+=("safari_121_ios_122")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-CHACHA20-POLY1305:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:DES-CBC3-SHA")
Add Safari 12.1 from iOS 12.2 Manually Wiresharked
2019-05-04 00:58:31 +02:00
ciphersuites+=("TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
Add Safari 12.1 from iOS 12.2 Manually Wiresharked
2019-05-04 00:58:31 +02:00
handshakebytes+=("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")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_3 -tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
highest_protocol+=("0x0304")
alpn+=("h2,http/1.1")
service+=("HTTP")
curves+=("X25519:secp256r1:secp384r1:secp521r1")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
requiresSha2+=(false)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
current+=(true)
Add Safari 12.1 on macOS 10.13.6 manually wiresharked
2019-05-06 21:19:46 +02:00
names+=("Safari 12.1 (macOS 10.13.6)")
short+=("safari_121_osx_10136")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-CHACHA20-POLY1305:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA")
Add Safari 12.1 on macOS 10.13.6 manually wiresharked
2019-05-06 21:19:46 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
Add Safari 12.1 on macOS 10.13.6 manually wiresharked
2019-05-06 21:19:46 +02:00
warning+=("")
handshakebytes+=("16030100e3010000df03039c6af5b589ea930473487870a111e2088f4c71c4497310945d571b318f259f47000028c02cc02bc024c023c00ac009cca9c030c02fc028c027c014c013cca8009d009c003d003c0035002f0100008eff0100010000000010000e00000b6369706865726c692e737400170000000d00140012040308040401050308050501080606010201000500050100000000337400000012000000100030002e0268320568322d31360568322d31350568322d313408737064792f332e3106737064792f3308687474702f312e31000b00020100000a000a0008001d001700180019")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
alpn+=("h2,http/1.1")
Update Safari to 13.0 and macOS to 10.14 manually wiresharked, now with TLS1.3 for macOS as well.
2019-10-16 20:36:08 +02:00
service+=("HTTP")
curves+=("X25519:secp256r1:secp384r1:secp521r1")
minDhBits+=(1024)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
requiresSha2+=(false)
current+=(false)
names+=("Safari 13.0 (macOS 10.14.6)")
short+=("safari_130_osx_10146")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-CHACHA20-POLY1305:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:DES-CBC3-SHA")
Fix Safari 13.0 Client Simulation The ciphersuites string for Safari 13.0 ends with a colon (':'). which causes OpenSSL to reject the command line when client simulation testing is performed in --ssl-native mode. This PR fixes the problem by removing the trailing colon.
2020-01-13 16:29:41 +01:00
ciphersuites+=("TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
Update Safari to 13.0 and macOS to 10.14 manually wiresharked, now with TLS1.3 for macOS as well.
2019-10-16 20:36:08 +02:00
warning+=("")
handshakebytes+=("1603010200010001fc030320ed560be50a8d6545d0409dfc0f6fd560d886fc62a514ee9923c642455fb5832084efe206b1c656b3abab810251eb260834abb7b0ec0d30450e50594c3a7f74120034130313011302c02cc02bc024c023c00ac009cca9c030c02fc028c027c014c013cca8009d009c003d003c0035002fc008c012000a0100017fff0100010000000010000e00000b6369706865726c692e737400170000000d0018001604030804040105030203080508050501080606010201000500050100000000337400000012000000100030002e0268320568322d31360568322d31350568322d313408737064792f332e3106737064792f3308687474702f312e31000b00020100003300260024001d00205465c46a55942e9fe02115c0cc2ab46ee074d4d164222f2ce6510bd91fa18419002d00020101002b0009080304030303020301000a000a0008001d001700180019001500ac00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_3 -tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
highest_protocol+=("0x0304")
alpn+=("h2,h2-16,h2-15,h2-14,spdy/3.1,spdy/3,http/1.1")
Add Safari 12.1 on macOS 10.13.6 manually wiresharked
2019-05-06 21:19:46 +02:00
service+=("HTTP")
curves+=("X25519:secp256r1:secp384r1:secp521r1")
minDhBits+=(1024)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
requiresSha2+=(false)
current+=(true)
Add Safari for macOS
2022-05-03 22:11:31 +02:00
names+=("Safari 15.4 (macOS 12.3.1)")
short+=("safari_154_osx_1231")
ch_ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA:AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:DES-CBC3-SHA")
ciphersuites+=("TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256")
ch_sni+=("$SNI")
warning+=("")
handshakebytes+=("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")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_3 -tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
highest_protocol+=("0x0304")
alpn+=("h2,http/1.1")
service+=("HTTP")
curves+=("X25519:secp256r1:secp384r1:secp521r1")
minDhBits+=(1024)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
requiresSha2+=(false)
current+=(true)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
names+=("Apple ATS 9 iOS 9")
short+=("apple_ats_9_ios9")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES128-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030300c6010000c2030355def146b7ed606006d8d54a3ece6c9c1b5070b51ce0e81d354178f0311d2e0100001800ffc02cc02bc024c00ac023c009c030c02fc028c027c0130100008100000014001200000f6465762e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d000e000c0501040102010503040302033374000000100030002e0268320568322d31360568322d31350568322d313408737064792f332e3106737064792f3308687474702f312e3100050005010000000000120000")
protos+=("-tls1_2")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
tlsvers+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0303")
highest_protocol+=("0x0303")
service+=("HTTP")
minDhBits+=(768)
maxDhBits+=(-1)
minRsaBits+=(2048)
maxRsaBits+=(8192)
minEcdsaBits+=(256)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(true)
Firefox 100, Chrom and Edge 101 (Win10) - disabled Opera (too old) - disabled ATS 9 / iOS 9 - reenabled Android 8.1
2022-05-09 17:49:16 +02:00
current+=(false)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
names+=("Tor 17.0.9 Win 7")
short+=("tor_1709_win7")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:CAMELLIA256-SHA:AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-AES128-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-AES128-SHA:SEED-SHA:CAMELLIA128-SHA:RC4-SHA:RC4-MD5:AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100a30100009f0301526795b7dd72263ca4170729d52799a927b2e8ec0e2d844bca2cd7061de7a57d00004800ffc00ac0140088008700390038c00fc00500840035c007c009c011c0130045004400330032c00cc00ec002c0040096004100050004002fc008c01200160013c00dc003feff000a0100002e00000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b0002010033740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
Deprecation of more clients * Tor 17 * Android 4.2.2 * IE 7 Vista
2019-05-08 23:12:45 +02:00
current+=(false)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
names+=("Java 6u45")
short+=("java_6u45")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("RC4-MD5:RC4-MD5:RC4-SHA:AES128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DES-CBC3-SHA:DES-CBC3-MD5:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DES-CBC-SHA:DES-CBC-MD5:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:EXP-RC4-MD5:EXP-RC4-MD5:EXP-DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("8065010301003c0000002000000401008000000500002f00003300003200000a0700c00000160000130000090600400000150000120000030200800000080000140000110000ff52173357f48ce6722f974dbb429b9279208d1cf5b9088947c9ba16d9ecbc0fa6")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0200")
highest_protocol+=("0x0301")
service+=("ANY")
minDhBits+=(-1)
maxDhBits+=(1024)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
Add Java 17 LTS plus * amend documentation * remove TLS 1.3 ciphers in ch_ciphers for consistency reasons
2022-05-04 15:46:36 +02:00
current+=(false)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
names+=("Java 7u25")
short+=("java_7u25")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:AES128-SHA:ECDH-ECDSA-AES128-SHA:ECDH-RSA-AES128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:RC4-SHA:ECDH-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100ad010000a9030152178334e8b855253e50e4623e475b6941c18cc312de6395a98e1cd4fd6735e700002ac009c013002fc004c00e00330032c007c0110005c002c00cc008c012000ac003c00d00160013000400ff01000056000a0034003200170001000300130015000600070009000a0018000b000c0019000d000e000f001000110002001200040005001400080016000b0002010000000014001200000f7777772e73736c6c6162732e636f6d")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("ANY")
minDhBits+=(-1)
maxDhBits+=(1024)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:sect163k1:sect163r2:prime192v1:secp224r1:sect233k1:sect233r1:sect283k1:sect283r1:secp384r1:sect409k1:sect409r1:secp521r1:sect571k1:sect571r1:secp160k1:secp160r1:secp160r2:sect163r1:secp192k1:sect193r1:sect193r2:secp224k1:sect239k1:secp256k1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
names+=("Java 8b132")
short+=("java_8b132")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:AES128-SHA256:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES128-SHA256:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:AES128-SHA:ECDH-ECDSA-AES128-SHA:ECDH-RSA-AES128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:RC4-SHA:ECDH-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:AES128-GCM-SHA256:ECDH-ECDSA-AES128-GCM-SHA256:ECDH-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030300e7010000e303035319a4a6c3909b598b7f5c0923999b7fa67cf6e79f73a016ea39a221c6989eeb000046c023c027003cc025c02900670040c009c013002fc004c00e00330032c007c0110005c002c00cc02bc02f009cc02dc031009e00a2c008c012000ac003c00d00160013000400ff01000074000a0034003200170001000300130015000600070009000a0018000b000c0019000d000e000f001000110002001200040005001400080016000b00020100000d001a001806030601050305010403040103030301020302010202010100000014001200000f7777772e73736c6c6162732e636f6d")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("ANY")
minDhBits+=(-1)
maxDhBits+=(2048)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:sect163k1:sect163r2:prime192v1:secp224r1:sect233k1:sect233r1:sect283k1:sect283r1:secp384r1:sect409k1:sect409r1:secp521r1:sect571k1:sect571r1:secp160k1:secp160r1:secp160r2:sect163r1:secp192k1:sect193r1:sect193r2:secp224k1:sect239k1:secp256k1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
names+=("Java 8u111")
short+=("java_8u111")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:AES128-SHA256:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES128-SHA256:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:AES128-SHA:ECDH-ECDSA-AES128-SHA:ECDH-RSA-AES128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:AES128-GCM-SHA256:ECDH-ECDSA-AES128-GCM-SHA256:ECDH-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
warning+=("")
handshakebytes+=("16030300d7010000d303035a7309b5212fd0d277459cefc4fe037e5cd90ee784ce364631083dd115ac8f6b00003ac023c027003cc025c02900670040c009c013002fc004c00e00330032c02bc02f009cc02dc031009e00a2c008c012000ac003c00d0016001300ff01000070000a0034003200170001000300130015000600070009000a0018000b000c0019000d000e000f001000110002001200040005001400080016000b00020100000d00160014060306010503050104030401040202030201020200000014001200000f6465762e73736c6c6162732e636f6d")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("ANY")
minDhBits+=(-1)
maxDhBits+=(2048)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("prime256v1:sect163k1:sect163r2:prime192v1:secp224r1:sect233k1:sect233r1:sect283k1:sect283r1:secp384r1:sect409k1:sect409r1:secp521r1:sect571k1:sect571r1:secp160k1:secp160r1:secp160r2:sect163r1:secp192k1:sect193r1:sect193r2:secp224k1:sect239k1:secp256k1")
requiresSha2+=(false)
current+=(false)
names+=("Java 8u161")
short+=("java_8u161")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:AES256-SHA256:ECDH-ECDSA-AES256-SHA384:ECDH-RSA-AES256-SHA384:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:AES256-SHA:ECDH-ECDSA-AES256-SHA:ECDH-RSA-AES256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:AES128-SHA256:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES128-SHA256:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:AES128-SHA:ECDH-ECDSA-AES128-SHA:ECDH-RSA-AES128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:AES256-GCM-SHA384:ECDH-ECDSA-AES256-GCM-SHA384:ECDH-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-DSS-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:AES128-GCM-SHA256:ECDH-ECDSA-AES128-GCM-SHA256:ECDH-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
warning+=("")
handshakebytes+=("16030300e7010000e303035a7c3e8a16fa16ff755e607b462ca6fd1127ae38dd849d0ffe7f174efa60ebb4000064c024c028003dc026c02a006b006ac00ac0140035c005c00f00390038c023c027003cc025c02900670040c009c013002fc004c00e00330032c02cc02bc030009dc02ec032009f00a3c02f009cc02dc031009e00a2c008c012000ac003c00d0016001300ff01000056000a001600140017001800190009000a000b000c000d000e0016000b00020100000d0016001406030601050305010403040104020203020102020017000000000014001200000f6465762e73736c6c6162732e636f6d")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("ANY")
minDhBits+=(-1)
maxDhBits+=(2048)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("prime256v1:secp384r1:secp521r1:sect283k1:sect283r1:sect409k1:sect409r1:sect571k1:sect571r1:secp256k1")
requiresSha2+=(false)
current+=(true)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
names+=("Java 8u31")
short+=("java_8u31")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:AES128-SHA256:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES128-SHA256:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:AES128-SHA:ECDH-ECDSA-AES128-SHA:ECDH-RSA-AES128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:AES128-GCM-SHA256:ECDH-ECDSA-AES128-GCM-SHA256:ECDH-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:RC4-SHA:ECDH-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030300e7010000e3030354c21168512b37f2a7410028c16673626ff931146918c7b29f78150b7339e5af000046c023c027003cc025c02900670040c009c013002fc004c00e00330032c02bc02f009cc02dc031009e00a2c008c012000ac003c00d00160013c007c0110005c002c00c000400ff01000074000a0034003200170001000300130015000600070009000a0018000b000c0019000d000e000f001000110002001200040005001400080016000b00020100000d001a001806030601050305010403040103030301020302010202010100000014001200000f6465762e73736c6c6162732e636f6d")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("ANY")
minDhBits+=(-1)
maxDhBits+=(2048)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:sect163k1:sect163r2:prime192v1:secp224r1:sect233k1:sect233r1:sect283k1:sect283r1:secp384r1:sect409k1:sect409r1:secp521r1:sect571k1:sect571r1:secp160k1:secp160r1:secp160r2:sect163r1:secp192k1:sect193r1:sect193r2:secp224k1:sect239k1:secp256k1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
current+=(false)
names+=("Java 9.0.4")
short+=("java_904")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:AES256-GCM-SHA384:ECDH-ECDSA-AES256-GCM-SHA384:ECDH-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-DSS-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:AES128-GCM-SHA256:ECDH-ECDSA-AES128-GCM-SHA256:ECDH-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:AES256-SHA256:ECDH-ECDSA-AES256-SHA384:ECDH-RSA-AES256-SHA384:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:AES256-SHA:ECDH-ECDSA-AES256-SHA:ECDH-RSA-AES256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:AES128-SHA256:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES128-SHA256:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:AES128-SHA:ECDH-ECDSA-AES128-SHA:ECDH-RSA-AES128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
warning+=("")
handshakebytes+=("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")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
service+=("ANY")
minDhBits+=(-1)
maxDhBits+=(2048)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("prime256v1:secp384r1:secp521r1:sect283k1:sect283r1:sect409k1:sect409r1:sect571k1:sect571r1:secp256k1")
requiresSha2+=(false)
Deprecate Java 9, its EOL since March 2018 No current distro (Ubuntu, Debian, Fedora) is still shipping it, Oracle has EOLed it in March 2018 according to https://www.oracle.com/technetwork/java/java-se-support-roadmap.html
2019-05-06 21:26:30 +02:00
current+=(false)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
Change the platform for Java from Ubuntu to OpenJDK
2019-05-07 19:39:20 +02:00
names+=("Java 11.0.2 (OpenJDK)")
Add Java 11 from Ubuntu 18.04 manually wiresharked, detailed version info: $ java -version openjdk version "11.0.2" 2019-01-15 OpenJDK Runtime Environment (build 11.0.2+9-Ubuntu-3ubuntu118.04.3) OpenJDK 64-Bit Server VM (build 11.0.2+9-Ubuntu-3ubuntu118.04.3, mixed mode)
2019-05-04 22:20:53 +02:00
short+=("java1102")
Add Java 17 LTS plus * amend documentation * remove TLS 1.3 ciphers in ch_ciphers for consistency reasons
2022-05-04 15:46:36 +02:00
ch_ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:AES256-GCM-SHA384:ECDH-ECDSA-AES256-GCM-SHA384:ECDH-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-DSS-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:AES128-GCM-SHA256:ECDH-ECDSA-AES128-GCM-SHA256:ECDH-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:AES256-SHA256:ECDH-ECDSA-AES256-SHA384:ECDH-RSA-AES256-SHA384:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:AES256-SHA:ECDH-ECDSA-AES256-SHA:ECDH-RSA-AES256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:AES128-SHA256:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES128-SHA256:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:AES128-SHA:ECDH-ECDSA-AES128-SHA:ECDH-RSA-AES128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA")
Add Java 11 from Ubuntu 18.04 manually wiresharked, detailed version info: $ java -version openjdk version "11.0.2" 2019-01-15 OpenJDK Runtime Environment (build 11.0.2+9-Ubuntu-3ubuntu118.04.3) OpenJDK 64-Bit Server VM (build 11.0.2+9-Ubuntu-3ubuntu118.04.3, mixed mode)
2019-05-04 22:20:53 +02:00
ciphersuites+=("TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
Add Java 11 from Ubuntu 18.04 manually wiresharked, detailed version info: $ java -version openjdk version "11.0.2" 2019-01-15 OpenJDK Runtime Environment (build 11.0.2+9-Ubuntu-3ubuntu118.04.3) OpenJDK 64-Bit Server VM (build 11.0.2+9-Ubuntu-3ubuntu118.04.3, mixed mode)
2019-05-04 22:20:53 +02:00
warning+=("")
handshakebytes+=("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")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_3 -tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
Add Java 12 from Ubuntu 19.04 manually wiresharked, detailed version info: $ java -version openjdk version "12.0.1" 2019-04-16 OpenJDK Runtime Environment (build 12.0.1+12-Ubuntu-1) OpenJDK 64-Bit Server VM (build 12.0.1+12-Ubuntu-1, mixed mode, sharing)
2019-05-04 22:30:10 +02:00
highest_protocol+=("0x0304")
service+=("ANY")
minDhBits+=(1024)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(224)
curves+=("secp256r1:secp384r1:secp521r1:sect283k1:sect283r1:sect409k1:sect409r1:sect571k1:sect571r1:ffdhe2048:ffdhe3072:ffdhe4096:ffdhe6144:ffdhe8192")
requiresSha2+=(false)
current+=(true)
Change the platform for Java from Ubuntu to OpenJDK
2019-05-07 19:39:20 +02:00
names+=("Java 12.0.1 (OpenJDK)")
Add Java 12 from Ubuntu 19.04 manually wiresharked, detailed version info: $ java -version openjdk version "12.0.1" 2019-04-16 OpenJDK Runtime Environment (build 12.0.1+12-Ubuntu-1) OpenJDK 64-Bit Server VM (build 12.0.1+12-Ubuntu-1, mixed mode, sharing)
2019-05-04 22:30:10 +02:00
short+=("java1201")
Add Java 17 LTS plus * amend documentation * remove TLS 1.3 ciphers in ch_ciphers for consistency reasons
2022-05-04 15:46:36 +02:00
ch_ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-CHACHA20-POLY1305:AES256-GCM-SHA384:ECDH-ECDSA-AES256-GCM-SHA384:ECDH-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305:DHE-DSS-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:AES128-GCM-SHA256:ECDH-ECDSA-AES128-GCM-SHA256:ECDH-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:AES256-SHA256:ECDH-ECDSA-AES256-SHA384:ECDH-RSA-AES256-SHA384:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:AES256-SHA:ECDH-ECDSA-AES256-SHA:ECDH-RSA-AES256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:AES128-SHA256:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES128-SHA256:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:AES128-SHA:ECDH-ECDSA-AES128-SHA:ECDH-RSA-AES128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA")
Add Java 12 from Ubuntu 19.04 manually wiresharked, detailed version info: $ java -version openjdk version "12.0.1" 2019-04-16 OpenJDK Runtime Environment (build 12.0.1+12-Ubuntu-1) OpenJDK 64-Bit Server VM (build 12.0.1+12-Ubuntu-1, mixed mode, sharing)
2019-05-04 22:30:10 +02:00
ciphersuites+=("TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
Add Java 12 from Ubuntu 19.04 manually wiresharked, detailed version info: $ java -version openjdk version "12.0.1" 2019-04-16 OpenJDK Runtime Environment (build 12.0.1+12-Ubuntu-1) OpenJDK 64-Bit Server VM (build 12.0.1+12-Ubuntu-1, mixed mode, sharing)
2019-05-04 22:30:10 +02:00
warning+=("")
handshakebytes+=("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")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_3 -tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
Add Java 11 from Ubuntu 18.04 manually wiresharked, detailed version info: $ java -version openjdk version "11.0.2" 2019-01-15 OpenJDK Runtime Environment (build 11.0.2+9-Ubuntu-3ubuntu118.04.3) OpenJDK 64-Bit Server VM (build 11.0.2+9-Ubuntu-3ubuntu118.04.3, mixed mode)
2019-05-04 22:20:53 +02:00
highest_protocol+=("0x0304")
service+=("ANY")
minDhBits+=(1024)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(224)
curves+=("secp256r1:secp384r1:secp521r1:sect283k1:sect283r1:sect409k1:sect409r1:sect571k1:sect571r1:ffdhe2048:ffdhe3072:ffdhe4096:ffdhe6144:ffdhe8192")
requiresSha2+=(false)
disable Java 12 and Safari on OS X 10.12
2022-05-31 12:17:38 +02:00
current+=(false)
Add Java 11 from Ubuntu 18.04 manually wiresharked, detailed version info: $ java -version openjdk version "11.0.2" 2019-01-15 OpenJDK Runtime Environment (build 11.0.2+9-Ubuntu-3ubuntu118.04.3) OpenJDK 64-Bit Server VM (build 11.0.2+9-Ubuntu-3ubuntu118.04.3, mixed mode)
2019-05-04 22:20:53 +02:00
Add Java 17 LTS plus * amend documentation * remove TLS 1.3 ciphers in ch_ciphers for consistency reasons
2022-05-04 15:46:36 +02:00
names+=("Java 17.0.3 (OpenJDK)")
short+=("java1703")
ch_ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA")
ciphersuites+=("TLS_AES_256_GCM_SHA384:TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256")
ch_sni+=("$SNI")
warning+=("")
handshakebytes+=("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")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_3 -tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
highest_protocol+=("0x0304")
service+=("ANY")
minDhBits+=(1024)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(224)
Teating of FFDHE groups * readded to the markdown * readded to the clientsimulations for Java 12
2022-05-04 18:29:29 +02:00
curves+=("x25519:secp256r1:secp384r1:secp521r1:x448:ffdhe2048:ffdhe3072:ffdhe4096:ffdhe6144:ffdhe8192")
requireseha2+=(true)
Add Java 17 LTS plus * amend documentation * remove TLS 1.3 ciphers in ch_ciphers for consistency reasons
2022-05-04 15:46:36 +02:00
current+=(true)
Go client (1.17)
2022-05-06 10:06:03 +02:00
names+=("go 1.17.8")
short+=("go_1178")
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:DES-CBC3-SHA")
ciphersuites+=("TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256")
ch_sni+=("$SNI")
warning+=("")
handshakebytes+=("16030101130100010f03031029d230a9b311180dec08b33ed809c3516adcf841cd3ec640a6d1b0ad6470e8204a279851f3e8a94a156e37b13d79f30c2ddbdc6907f30f663df9f43c9dd82b8e0026c02bc02fc02cc030cca9cca8c009c013c00ac014009c009d002f0035c012000a130113021303010000a00000000f000d00000a7465737473736c2e7368000500050100000000000a000a0008001d001700180019000b00020100000d001a0018080404030807080508060401050106010503060302010203ff010001000010000e000c02683208687474702f312e3100120000002b0009080304030303020301003300260024001d0020a3704893c7f1fb37d84dda6c10a6b1b7315d8f05e2a7946c239aaa13a33efa28")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_3 -tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
highest_protocol+=("0x0304")
alpn+=("h2,http/1.1")
service+=("ANY")
minDhBits+=(1024)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(224)
curves+=("x25519:secp256r1:secp384r1:secp521r1")
requiresSha2+=(false)
current+=(true)
Add LibreSSL from MacOS
2022-05-31 16:17:47 +02:00
names+=("LibreSSL 2.8.3 (Apple)")
short+=("libressl_283")
ch_ciphers+=("ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:GOST2012256-GOST89-GOST89:DHE-RSA-CAMELLIA256-SHA256:DHE-RSA-CAMELLIA256-SHA:GOST2001-GOST89-GOST89:AES256-GCM-SHA384:AES256-SHA256:AES256-SHA:CAMELLIA256-SHA256:CAMELLIA256-SHA:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-CAMELLIA128-SHA256:DHE-RSA-CAMELLIA128-SHA:AES128-GCM-SHA256:AES128-SHA256:AES128-SHA:CAMELLIA128-SHA256:CAMELLIA128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:RC4-SHA:RC4-MD5:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:DES-CBC3-SHA")
ciphersuites+=("")
ch_sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100d2010000ce0303b92919aa3a64d5be518c116c52fc2fd6aab43535432e0702668527957473b6b400005ccca9cca8ccaac030c02cc028c024c014c00a009f006b0039ff8500c400880081009d003d003500c00084c02fc02bc027c023c013c009009e0067003300be0045009c003c002f00ba0041c011c00700050004c012c0080016000a00ff010000490000000f000d00000a7465737473736c2e7368000b00020100000a00080006001d0017001800230000000d001c001a06010603efef0501050304010403eeeeeded0301030302010203")
protos+=("-no_ssl2 -no_ssl3")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
alpn+=("h2,http/1.1")
service+=("ANY")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("X25519:secp256r1:secp384r1")
requiresSha2+=(false)
current+=(true)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
names+=("OpenSSL 0.9.8y")
short+=("openssl_098y")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DES-CBC3-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:AES128-SHA:IDEA-CBC-SHA:RC4-SHA:RC4-MD5:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:EXP-RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100730100006f0301521782e707c1a780d3124742f35573dbb693babe5d3a7e9405c706af18b636bf00002a00390038003500160013000a00330032002f0007000500040015001200090014001100080006000300ff0100001c00000014001200000f7777772e73736c6c6162732e636f6d00230000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("ANY")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("OpenSSL 1.0.1h")
short+=("openssl_101h")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:SRP-DSS-AES-256-CBC-SHA:SRP-RSA-AES-256-CBC-SHA:DHE-DSS-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA256:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:ECDH-RSA-AES256-GCM-SHA384:ECDH-ECDSA-AES256-GCM-SHA384:ECDH-RSA-AES256-SHA384:ECDH-ECDSA-AES256-SHA384:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:AES256-GCM-SHA384:AES256-SHA256:AES256-SHA:CAMELLIA256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:SRP-DSS-3DES-EDE-CBC-SHA:SRP-RSA-3DES-EDE-CBC-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:SRP-DSS-AES-128-CBC-SHA:SRP-RSA-AES-128-CBC-SHA:DHE-DSS-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-SEED-SHA:DHE-DSS-SEED-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:ECDH-RSA-AES128-GCM-SHA256:ECDH-ECDSA-AES128-GCM-SHA256:ECDH-RSA-AES128-SHA256:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES128-SHA:ECDH-ECDSA-AES128-SHA:AES128-GCM-SHA256:AES128-SHA256:AES128-SHA:SEED-SHA:CAMELLIA128-SHA:IDEA-CBC-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:RC4-SHA:RC4-MD5:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:EXP-RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("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")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("ANY")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("sect571r1:sect571k1:secp521r1:sect409k1:sect409r1:secp384r1:sect283k1:sect283r1:secp256k1:prime256v1:sect239k1:sect233k1:sect233r1:secp224k1:secp224r1:sect193r1:sect193r2:secp192k1:prime192v1:sect163k1:sect163r1:sect163r2:secp160k1:secp160r1:secp160r2")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("OpenSSL 1.0.1l")
short+=("openssl_101l")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-DSS-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA256:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:ECDH-RSA-AES256-GCM-SHA384:ECDH-ECDSA-AES256-GCM-SHA384:ECDH-RSA-AES256-SHA384:ECDH-ECDSA-AES256-SHA384:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:AES256-GCM-SHA384:AES256-SHA256:AES256-SHA:CAMELLIA256-SHA:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:DHE-DSS-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-SEED-SHA:DHE-DSS-SEED-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:ECDH-RSA-AES128-GCM-SHA256:ECDH-ECDSA-AES128-GCM-SHA256:ECDH-RSA-AES128-SHA256:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES128-SHA:ECDH-ECDSA-AES128-SHA:AES128-GCM-SHA256:AES128-SHA256:AES128-SHA:SEED-SHA:CAMELLIA128-SHA:IDEA-CBC-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:RC4-SHA:RC4-MD5:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:EXP-RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("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")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("ANY")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("sect571r1:sect571k1:secp521r1:sect409k1:sect409r1:secp384r1:sect283k1:sect283r1:secp256k1:prime256v1:sect239k1:sect233k1:sect233r1:secp224k1:secp224r1:sect193r1:sect193r2:secp192k1:prime192v1:sect163k1:sect163r1:sect163r2:secp160k1:secp160r1:secp160r2")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
Add firefox 71 ... and * deprecate openssl 1.0.1 * enable Chrome 74 instead of Chrome 65
2020-01-13 22:57:10 +01:00
current+=(false)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
names+=("OpenSSL 1.0.2e")
short+=("openssl_102e")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DH-DSS-AES256-GCM-SHA384:DHE-DSS-AES256-GCM-SHA384:DH-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA256:DH-RSA-AES256-SHA256:DH-DSS-AES256-SHA256:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:DH-RSA-AES256-SHA:DH-DSS-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:DH-RSA-CAMELLIA256-SHA:DH-DSS-CAMELLIA256-SHA:ECDH-RSA-AES256-GCM-SHA384:ECDH-ECDSA-AES256-GCM-SHA384:ECDH-RSA-AES256-SHA384:ECDH-ECDSA-AES256-SHA384:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:AES256-GCM-SHA384:AES256-SHA256:AES256-SHA:CAMELLIA256-SHA:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:DH-DSS-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:DH-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA256:DH-RSA-AES128-SHA256:DH-DSS-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DH-RSA-AES128-SHA:DH-DSS-AES128-SHA:DHE-RSA-SEED-SHA:DHE-DSS-SEED-SHA:DH-RSA-SEED-SHA:DH-DSS-SEED-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:DH-RSA-CAMELLIA128-SHA:DH-DSS-CAMELLIA128-SHA:ECDH-RSA-AES128-GCM-SHA256:ECDH-ECDSA-AES128-GCM-SHA256:ECDH-RSA-AES128-SHA256:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES128-SHA:ECDH-ECDSA-AES128-SHA:AES128-GCM-SHA256:AES128-SHA256:AES128-SHA:SEED-SHA:CAMELLIA128-SHA:IDEA-CBC-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:RC4-SHA:RC4-MD5:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DH-RSA-DES-CBC3-SHA:DH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DH-RSA-DES-CBC-SHA:DH-DSS-DES-CBC-SHA:DES-CBC-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("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")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("ANY")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp521r1:brainpoolP512r1:brainpoolP384r1:secp384r1:brainpoolP256r1:secp256k1:sect571r1:sect571k1:sect409k1:sect409r1:sect283k1:sect283r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(true)
Add client simulations .. for Android 8.1 and Firefox 66. Add ciphersuites to the existing handshakes and update the documentation accordingly.
2019-04-20 20:21:25 +02:00
names+=("OpenSSL 1.1.0j (Debian)")
short+=("openssl_110j")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:DHE-RSA-AES256-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA")
Add client simulations .. for Android 8.1 and Firefox 66. Add ciphersuites to the existing handshakes and update the documentation accordingly.
2019-04-20 20:21:25 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
Add client simulations .. for Android 8.1 and Firefox 66. Add ciphersuites to the existing handshakes and update the documentation accordingly.
2019-04-20 20:21:25 +02:00
warning+=("")
handshakebytes+=("16030100c2010000be03036468410c4ae36f78a4357ad19fa61353e46aed101eff4e0c9f77ec654dc12eb4000038c02cc030009fcca9cca8ccaac02bc02f009ec024c028006bc023c0270067c00ac0140039c009c0130033009d009c003d003c0035002f00ff0100005d00000013001100000e7465737473736c2e73683a343433000b000403000102000a000a0008001d001700190018002300000016000000170000000d0020001e060106020603050105020503040104020403030103020303020102020203")
Fix typo in handshake simulation with openssl 1.1x "protos" contained "-no-ssl3" instead of "-no_ssl3" which lead to an error message "Oops: openssl s_client connect problem" -- which wasn't caught by the STARTTLS unit test either :-(
2019-05-02 09:53:51 +02:00
protos+=("-no_ssl2 -no_ssl3")
Add client simulations .. for Android 8.1 and Firefox 66. Add ciphersuites to the existing handshakes and update the documentation accordingly.
2019-04-20 20:21:25 +02:00
tlsvers+=("-tls1_2 -tls1_1 -tls1")
Update openssl handshakes to 1.1.0l and 1.1.1d. Seems that for the latter TLS 1.0 and 1.1 are disabled now, looking at the supported version extension. However on the command line an s_client connect works. So this commit need to be amended.
2020-01-14 18:02:43 +01:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
alpn+=("h2,http/1.1")
service+=("ANY")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("X25519:secp256r1:secp521r1:secp384r1")
requiresSha2+=(false)
current+=(false)
names+=("OpenSSL 1.1.0l (Debian)")
short+=("openssl_110l")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:DHE-RSA-AES256-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA")
Update openssl handshakes to 1.1.0l and 1.1.1d. Seems that for the latter TLS 1.0 and 1.1 are disabled now, looking at the supported version extension. However on the command line an s_client connect works. So this commit need to be amended.
2020-01-14 18:02:43 +01:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
Update openssl handshakes to 1.1.0l and 1.1.1d. Seems that for the latter TLS 1.0 and 1.1 are disabled now, looking at the supported version extension. However on the command line an s_client connect works. So this commit need to be amended.
2020-01-14 18:02:43 +01:00
warning+=("")
handshakebytes+=("16030100bf010000bb030350a1cc6c1ae6c9726ce0a025f4d2c522e6b503d5ccd2d1740bd1bb2e7af108d5000038c02cc030009fcca9cca8ccaac02bc02f009ec024c028006bc023c0270067c00ac0140039c009c0130033009d009c003d003c0035002f00ff0100005a00000010000e00000b7465737473736c2e6e6574000b000403000102000a000a0008001d001700190018002300000016000000170000000d0020001e060106020603050105020503040104020403030103020303020102020203")
protos+=("-no_ssl2 -no_ssl3")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
Add client simulations .. for Android 8.1 and Firefox 66. Add ciphersuites to the existing handshakes and update the documentation accordingly.
2019-04-20 20:21:25 +02:00
highest_protocol+=("0x0303")
alpn+=("h2,http/1.1")
service+=("ANY")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("X25519:secp256r1:secp521r1:secp384r1")
requiresSha2+=(false)
current+=(true)
names+=("OpenSSL 1.1.1b (Debian)")
short+=("openssl_111b")
Add Java 17 LTS plus * amend documentation * remove TLS 1.3 ciphers in ch_ciphers for consistency reasons
2022-05-04 15:46:36 +02:00
ch_ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:DHE-RSA-AES256-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA")
Add client simulations .. for Android 8.1 and Firefox 66. Add ciphersuites to the existing handshakes and update the documentation accordingly.
2019-04-20 20:21:25 +02:00
ciphersuites+=("TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
Add client simulations .. for Android 8.1 and Firefox 66. Add ciphersuites to the existing handshakes and update the documentation accordingly.
2019-04-20 20:21:25 +02:00
warning+=("")
handshakebytes+=("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")
Fix typo in handshake simulation with openssl 1.1x "protos" contained "-no-ssl3" instead of "-no_ssl3" which lead to an error message "Oops: openssl s_client connect problem" -- which wasn't caught by the STARTTLS unit test either :-(
2019-05-02 09:53:51 +02:00
protos+=("-no_ssl2 -no_ssl3")
Add client simulations .. for Android 8.1 and Firefox 66. Add ciphersuites to the existing handshakes and update the documentation accordingly.
2019-04-20 20:21:25 +02:00
tlsvers+=("-tls1_3 -tls1_2 -tls1_1 -tls1")
Update openssl handshakes to 1.1.0l and 1.1.1d. Seems that for the latter TLS 1.0 and 1.1 are disabled now, looking at the supported version extension. However on the command line an s_client connect works. So this commit need to be amended.
2020-01-14 18:02:43 +01:00
lowest_protocol+=("0x0301")
highest_protocol+=("0x0304")
alpn+=("h2,http/1.1")
service+=("ANY")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("X25519:secp256r1:x448:secp521r1:secp384r1")
requiresSha2+=(true)
current+=(false)
names+=("OpenSSL 1.1.1d (Debian)")
short+=("openssl_111d")
Add Java 17 LTS plus * amend documentation * remove TLS 1.3 ciphers in ch_ciphers for consistency reasons
2022-05-04 15:46:36 +02:00
ch_ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:DHE-RSA-AES256-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA")
Update openssl handshakes to 1.1.0l and 1.1.1d. Seems that for the latter TLS 1.0 and 1.1 are disabled now, looking at the supported version extension. However on the command line an s_client connect works. So this commit need to be amended.
2020-01-14 18:02:43 +01:00
ciphersuites+=("TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
Update openssl handshakes to 1.1.0l and 1.1.1d. Seems that for the latter TLS 1.0 and 1.1 are disabled now, looking at the supported version extension. However on the command line an s_client connect works. So this commit need to be amended.
2020-01-14 18:02:43 +01:00
warning+=("")
handshakebytes+=("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")
Readd TLS 1.0 and TLS 1.1 to openssl 1.1.1d (Debian) ... see previous commit
2020-01-14 18:17:44 +01:00
protos+=("-no_ssl2 -no_ssl3")
tlsvers+=("-tls1_3 -tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
Add client simulations .. for Android 8.1 and Firefox 66. Add ciphersuites to the existing handshakes and update the documentation accordingly.
2019-04-20 20:21:25 +02:00
highest_protocol+=("0x0304")
alpn+=("h2,http/1.1")
service+=("ANY")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("X25519:secp256r1:x448:secp521r1:secp384r1")
requiresSha2+=(true)
current+=(true)
Update openssl 3.0.3
2022-05-04 14:32:04 +02:00
names+=("OpenSSL 3.0.3 (git)")
short+=("openssl_303")
ch_ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:DHE-RSA-AES256-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA")
ciphersuites+=("TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256")
ch_sni+=("$SNI")
warning+=("")
handshakebytes+=("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")
correct openssl 3.0.3 data which made CI action fail
2022-05-31 14:32:47 +02:00
protos+=("-no_ssl2 -no_ssl3")
Update openssl 3.0.3
2022-05-04 14:32:04 +02:00
tlsvers+=("-tls1_3 -tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
highest_protocol+=("0x0304")
alpn+=("h2,http/1.1")
service+=("ANY")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("X25519:secp256r1:x448:secp521r1:secp384r1")
requiresSha2+=(true)
current+=(true)
Including AppleMail
2022-05-31 15:12:16 +02:00
names+=("Apple Mail (16.0)")
short+=("apple_mail_16_0")
ch_ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA")
ciphersuites+=("")
ch_sni+=("$SNI")
warning+=("")
handshakebytes+=("16030100a9010000a50303629610e27d8327bb7869cb85b066cd04b5c5caa9bfb14740edc358ac9dcd843b00002c00ffc02cc02bc024c023c00ac009c008c030c02fc028c027c014c013c012009d009c003d003c0035002f000a0100005000000013001100000e696d61702e676d61696c2e636f6d000a00080006001700180019000b00020100000d00120010040102010501060104030203050306030005000501000000000012000000170000")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1_0")
lowest_protocol+=("0x0301")
highest_protocol+=("0x0303")
alpn+=("h2,http/1.1")
service+=("HTTP,SMTP,POP,IMAP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("secp256r1:secp384r1:secp521r1")
requiresSha2+=(false)
current+=(true)
Add Thunderbird 60.6.1 to client simulation
2019-04-23 13:37:50 +02:00
names+=("Thunderbird (60.6)")
short+=("thunderbird_60_6_1")
Add Java 17 LTS plus * amend documentation * remove TLS 1.3 ciphers in ch_ciphers for consistency reasons
2022-05-04 15:46:36 +02:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Add Thunderbird 60.6.1 to client simulation
2019-04-23 13:37:50 +02:00
ciphersuites+=("TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
Add Thunderbird 60.6.1 to client simulation
2019-04-23 13:37:50 +02:00
warning+=("")
handshakebytes+=("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")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_3 -tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
highest_protocol+=("0x0304")
alpn+=("h2,http/1.1")
service+=("HTTP,SMTP,POP,IMAP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("X25519:secp256r1:secp384r1:secp521r1:ffdhe2048:ffdhe3072")
requiresSha2+=(false)
Update Thunderbird simulation to v68.3
2020-01-13 11:35:58 +01:00
current+=(false)
Add recent Chrome and Opera handshakes Chrome 78 and 79, Opera 65 and 66 Remove FTP from Chrome
2020-01-13 16:02:39 +01:00
names+=("Thunderbird (68.3)")
Update Thunderbird simulation to v68.3
2020-01-13 11:35:58 +01:00
short+=("thunderbird_68_3_1")
Add Java 17 LTS plus * amend documentation * remove TLS 1.3 ciphers in ch_ciphers for consistency reasons
2022-05-04 15:46:36 +02:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Update Thunderbird simulation to v68.3
2020-01-13 11:35:58 +01:00
ciphersuites+=("TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
Update Thunderbird simulation to v68.3
2020-01-13 11:35:58 +01:00
warning+=("")
handshakebytes+=("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")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_3 -tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0301")
highest_protocol+=("0x0304")
alpn+=("h2,http/1.1")
service+=("HTTP,SMTP,POP,IMAP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("X25519:secp256r1:secp384r1:secp521r1:ffdhe2048:ffdhe3072")
requiresSha2+=(false)
Add Thunderbid 91.9 to hanshak simulation
2022-05-31 12:10:11 +02:00
current+=(false)
names+=("Thunderbird (91.9)")
short+=("thunderbird_91_9")
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
ciphersuites+=("TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384")
ch_sni+=("$SNI")
warning+=("")
handshakebytes+=("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")
protos+=("-no_ssl3 -no_ssl2")
tlsvers+=("-tls1_3 -tls1_2")
lowest_protocol+=("0x0303")
highest_protocol+=("0x0304")
alpn+=("h2,http/1.1")
service+=("HTTP,SMTP,POP,IMAP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("X25519:secp256r1:secp384r1:secp521r1:ffdhe2048:ffdhe3072")
requiresSha2+=(false)
Add Thunderbird 60.6.1 to client simulation
2019-04-23 13:37:50 +02:00
current+=(true)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
names+=("Baidu Jan 2015")
short+=("baidu_jan_2015")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:CAMELLIA256-SHA:AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-AES128-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-AES128-SHA:SEED-SHA:CAMELLIA128-SHA:RC4-MD5:RC4-SHA:AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100a30100009f030154c1a814c755540538a93b25e7824623d0ee9fc294ee752869cf76819edb3aa200004800ffc00ac0140088008700390038c00fc00500840035c007c009c011c0130045004400330032c00cc00ec002c0040096004100040005002fc008c01200160013c00dc003feff000a0100002e00000014001200000f6465762e73736c6c6162732e636f6d000a00080006001700180019000b0002010000230000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
names+=("BingBot Dec 2013")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
short+=("bingbot_dec_2013")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA:DHE-DSS-AES128-SHA:DHE-DSS-AES256-SHA:EDH-DSS-DES-CBC3-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("160301005e0100005a030152a6b6912f40c56ac64206dc1409e8758b812f7076cf5ffd8d55a616681e551e000018002f00350005000ac013c014c009c00a003200380013000401000019ff01000100000a0006000400170018000b0002010000230000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("BingPreview Dec 2013")
short+=("bingpreview_dec_2013")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DES-CBC3-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:AES128-SHA:IDEA-CBC-SHA:RC4-SHA:RC4-MD5:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:EXP-RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100700100006c030152a5abea96fe047222610094b2d13a7e0dea51181fa2c417dec9706757a9958800002a00390038003500160013000a00330032002f0007000500040015001200090014001100080006000300ff020100001800000014001200000f7777772e73736c6c6162732e636f6d")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
names+=("BingPreview Jan 2015")
short+=("bingpreview_jan_2015")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:SRP-DSS-AES-256-CBC-SHA:SRP-RSA-AES-256-CBC-SHA:DHE-DSS-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA256:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:ECDH-RSA-AES256-GCM-SHA384:ECDH-ECDSA-AES256-GCM-SHA384:ECDH-RSA-AES256-SHA384:ECDH-ECDSA-AES256-SHA384:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:AES256-GCM-SHA384:AES256-SHA256:AES256-SHA:CAMELLIA256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:SRP-DSS-3DES-EDE-CBC-SHA:SRP-RSA-3DES-EDE-CBC-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:SRP-DSS-AES-128-CBC-SHA:SRP-RSA-AES-128-CBC-SHA:DHE-DSS-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-SEED-SHA:DHE-DSS-SEED-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:ECDH-RSA-AES128-GCM-SHA256:ECDH-ECDSA-AES128-GCM-SHA256:ECDH-RSA-AES128-SHA256:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES128-SHA:ECDH-ECDSA-AES128-SHA:AES128-GCM-SHA256:AES128-SHA256:AES128-SHA:SEED-SHA:CAMELLIA128-SHA:IDEA-CBC-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:RC4-SHA:RC4-MD5:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:EXP-RC4-MD5")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
warning+=("")
handshakebytes+=("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")
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
curves+=("sect571r1:sect571k1:secp521r1:sect409k1:sect409r1:secp384r1:sect283k1:sect283r1:secp256k1:prime256v1:sect239k1:sect233k1:sect233r1:secp224k1:secp224r1:sect193r1:sect193r2:secp192k1:prime192v1:sect163k1:sect163r1:sect163r2:secp160k1:secp160r1:secp160r2")
requiresSha2+=(false)
current+=(false)
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
names+=("BingPreview Jun 2014")
short+=("bingpreview_jun_2014")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DES-CBC3-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:AES128-SHA:IDEA-CBC-SHA:RC4-SHA:RC4-MD5:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:EXP-RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030100700100006c030153ad3c76315cf735e16a170784cdc7d52012aa10eb6a85625ed6cac5e1af286500002a00390038003500160013000a00330032002f0007000500040015001200090014001100080006000300ff020100001800000014001200000f6465762e73736c6c6162732e636f6d")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
names+=("Yahoo Slurp Jan 2015")
short+=("yahoo_slurp_jan_2015")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-DSS-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA256:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:ECDH-RSA-AES256-GCM-SHA384:ECDH-ECDSA-AES256-GCM-SHA384:ECDH-RSA-AES256-SHA384:ECDH-ECDSA-AES256-SHA384:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:AES256-GCM-SHA384:AES256-SHA256:AES256-SHA:CAMELLIA256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:DHE-DSS-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-SEED-SHA:DHE-DSS-SEED-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:ECDH-RSA-AES128-GCM-SHA256:ECDH-ECDSA-AES128-GCM-SHA256:ECDH-RSA-AES128-SHA256:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES128-SHA:ECDH-ECDSA-AES128-SHA:AES128-GCM-SHA256:AES128-SHA256:AES128-SHA:SEED-SHA:CAMELLIA128-SHA:IDEA-CBC-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:RC4-SHA:RC4-MD5:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:EXP-RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
handshakebytes+=("160301011a01000116030354c1f2e62a9427a5c66f85499abd08114e2f02822304c68a85ebf2b54182bca5000094c030c02cc028c024c014c00a00a3009f006b006a0039003800880087c032c02ec02ac026c00fc005009d003d00350084c012c00800160013c00dc003000ac02fc02bc027c023c013c00900a2009e0067004000330032009a009900450044c031c02dc029c025c00ec004009c003c002f009600410007c011c007c00cc002000500040015001200090014001100080006000300ff0100005900000014001200000f6465762e73736c6c6162732e636f6d000b000403000102000a000600040018001700230000000d002200200601060206030501050205030401040204030301030203030201020202030101000f000101")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
curves+=("secp384r1:prime256v1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
names+=("Googlebot Feb 2015")
short+=("googlebot_feb_2015")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:RC4-SHA:RC4-MD5:AES128-SHA:DES-CBC3-SHA:AES256-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
handshakebytes+=("16030100db010000d70303d9c72e000f6a7f0a156840bd4aa9fd0612df4aeb69a1a1c6452c5f1f4d0ba6b000002ac02bc02fc007c011c009c013c00ac014009c00050004002f000a003500330032001600130039003800ff0100008400000014001200000f6465762e73736c6c6162732e636f6d00230000000d0020001e06010602060305010502050304010402040303010302030302010202020333740000000b000403000102000a00340032000e000d0019000b000c00180009000a00160017000800060007001400150004000500120013000100020003000f00100011")
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
highest_protocol+=("0x0303")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("sect571r1:sect571k1:secp521r1:sect409k1:sect409r1:secp384r1:sect283k1:sect283r1:secp256k1:prime256v1:sect239k1:sect233k1:sect233r1:secp224k1:secp224r1:sect193r1:sect193r2:secp192k1:prime192v1:sect163k1:sect163r1:sect163r2:secp160k1:secp160r1:secp160r2")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
names+=("Googlebot Feb 2018")
short+=("googlebot_feb_2018")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA:AES256-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
handshakebytes+=("16030100ab010000a70303618edea4e5ecaa378efef358baadb5f4eecd224a2e8474508c564d644dbbf23100001ec02bc02fcca9cca8c02cc030c009c013c00ac014009c009d002f0035000a01000060ff0100010000000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d001400120403080404010503080505010806060102010005000501000000003374000000120000000b00020100000a00080006001d00170018")
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
highest_protocol+=("0x0303")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
curves+=("X25519:prime256v1:secp384r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
names+=("Googlebot Jun 2014")
short+=("googlebot_jun_2014")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:RC4-SHA:RC4-MD5:AES128-SHA:DES-CBC3-SHA:AES256-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
handshakebytes+=("16030100b1010000ad0301b2da3708a1b55eb24ba0e985702f5823854fe9d5752d4ad948270343ef7a92d9000024c007c011c009c013c00ac01400050004002f000a003500330032001600130039003800ff0100006000000014001200000f6465762e73736c6c6162732e636f6d0023000033740000000b000403000102000a00340032000e000d0019000b000c00180009000a00160017000800060007001400150004000500120013000100020003000f00100011")
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
highest_protocol+=("0x0301")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("sect571r1:sect571k1:secp521r1:sect409k1:sect409r1:secp384r1:sect283k1:sect283r1:secp256k1:prime256v1:sect239k1:sect233k1:sect233r1:secp224k1:secp224r1:sect193r1:sect193r2:secp192k1:prime192v1:sect163k1:sect163r1:sect163r2:secp160k1:secp160r1:secp160r2")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
names+=("Googlebot Oct 2013")
short+=("googlebot_oct_2013")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:RC4-SHA:RC4-MD5:AES128-SHA:DES-CBC3-SHA:AES256-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
handshakebytes+=("16030100b6010000b203015267881356b382cb8779331e85b5e77ef8c0c6d30c0bdcfef87145866912d59f000024c007c011c009c013c00ac01400050004002f000a003500330032001600130039003800ff0100006500000014001200000f7777772e73736c6c6162732e636f6d000b000403000102000a00340032000e000d0019000b000c00180009000a00160017000800060007001400150004000500120013000100020003000f0010001100230000000f00010133740000")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0301")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
curves+=("sect571r1:sect571k1:secp521r1:sect409k1:sect409r1:secp384r1:sect283k1:sect283r1:secp256k1:prime256v1:sect239k1:sect233k1:sect233r1:secp224k1:secp224r1:sect193r1:sect193r2:secp192k1:prime192v1:sect163k1:sect163r1:sect163r2:secp160k1:secp160r1:secp160r2")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("Yahoo Slurp Jun 2014")
short+=("yahoo_slurp_jun_2014")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-DSS-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA256:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:ECDH-RSA-AES256-GCM-SHA384:ECDH-ECDSA-AES256-GCM-SHA384:ECDH-RSA-AES256-SHA384:ECDH-ECDSA-AES256-SHA384:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:AES256-GCM-SHA384:AES256-SHA256:AES256-SHA:CAMELLIA256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:DHE-DSS-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DHE-RSA-SEED-SHA:DHE-DSS-SEED-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:ECDH-RSA-AES128-GCM-SHA256:ECDH-ECDSA-AES128-GCM-SHA256:ECDH-RSA-AES128-SHA256:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES128-SHA:ECDH-ECDSA-AES128-SHA:AES128-GCM-SHA256:AES128-SHA256:AES128-SHA:SEED-SHA:CAMELLIA128-SHA:IDEA-CBC-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:RC4-SHA:RC4-MD5:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:EXP-RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("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")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("secp384r1:prime256v1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
names+=("Yahoo Slurp Oct 2013")
short+=("yahoo_slurp_oct_2013")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:CAMELLIA256-SHA:AES256-SHA:ECDHE-ECDSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-RC4-SHA:ECDH-RSA-AES128-SHA:ECDH-ECDSA-RC4-SHA:ECDH-ECDSA-AES128-SHA:SEED-SHA:CAMELLIA128-SHA:RC4-MD5:RC4-SHA:AES128-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
handshakebytes+=("16030100a30100009f0301525f6c38ddc9634ed772519ee023cd48ea60cf5f3a79fff5fd41491a39344c8900004800ffc00ac0140088008700390038c00fc00500840035c007c009c011c0130045004400330032c00cc00ec002c0040096004100040005002fc008c01200160013c00dc003feff000a0100002e00000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b0002010000230000")
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
highest_protocol+=("0x0301")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
curves+=("prime256v1:secp384r1:secp521r1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
names+=("YandexBot 3.0")
short+=("yandexbot_30")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("DES-CBC3-SHA:RC4-SHA:RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
handshakebytes+=("16030000310100002d030052e5747f771870662109bfd989a73aa284331afbc8ae51ba5d2e64a108cf71c7000006000a000500040100")
protos+=("-ssl3")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
tlsvers+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0300")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
names+=("YandexBot Jan 2015")
short+=("yandexbot_jan_2015")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:SRP-DSS-AES-256-CBC-SHA:SRP-RSA-AES-256-CBC-SHA:DHE-DSS-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA256:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-GCM-SHA384:ECDH-ECDSA-AES256-GCM-SHA384:ECDH-RSA-AES256-SHA384:ECDH-ECDSA-AES256-SHA384:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:AES256-GCM-SHA384:AES256-SHA256:AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:SRP-DSS-3DES-EDE-CBC-SHA:SRP-RSA-3DES-EDE-CBC-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:SRP-DSS-AES-128-CBC-SHA:SRP-RSA-AES-128-CBC-SHA:DHE-DSS-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-AES128-GCM-SHA256:ECDH-ECDSA-AES128-GCM-SHA256:ECDH-RSA-AES128-SHA256:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES128-SHA:ECDH-ECDSA-AES128-SHA:AES128-GCM-SHA256:AES128-SHA256:AES128-SHA:IDEA-CBC-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:RC4-SHA:RC4-MD5:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:EXP-RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
handshakebytes+=("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")
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
highest_protocol+=("0x0303")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
curves+=("sect571r1:sect571k1:secp521r1:sect409k1:sect409r1:secp384r1:sect283k1:sect283r1:secp256k1:prime256v1:sect239k1:sect233k1:sect233r1:secp224k1:secp224r1:sect193r1:sect193r2:secp192k1:prime192v1:sect163k1:sect163r1:sect163r2:secp160k1:secp160r1:secp160r2")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
names+=("YandexBot May 2014")
short+=("yandexbot_may_2014")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DES-CBC3-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:AES128-SHA:IDEA-CBC-SHA:RC4-SHA:RC4-MD5:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:EXP-RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
handshakebytes+=("16030100760100007203015379d6fc38f530a5f78d3ec23de856d27305a4cebcc6d8f1b1ad40c8901fafa400002a00390038003500160013000a00330032002f0007000500040015001200090014001100080006000300ff0100001f0000001700150000127777772e6665697374796475636b2e636f6d00230000")
protos+=("-no_tls1_2 -no_tls1_1 -no_ssl2")
tlsvers+=("-tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
highest_protocol+=("0x0301")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
curves+=("")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
names+=("YandexBot Sep 2014")
short+=("yandexbot_sep_2014")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:SRP-DSS-AES-256-CBC-SHA:SRP-RSA-AES-256-CBC-SHA:DHE-DSS-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA256:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-GCM-SHA384:ECDH-ECDSA-AES256-GCM-SHA384:ECDH-RSA-AES256-SHA384:ECDH-ECDSA-AES256-SHA384:ECDH-RSA-AES256-SHA:ECDH-ECDSA-AES256-SHA:AES256-GCM-SHA384:AES256-SHA256:AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:SRP-DSS-3DES-EDE-CBC-SHA:SRP-RSA-3DES-EDE-CBC-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:SRP-DSS-AES-128-CBC-SHA:SRP-RSA-AES-128-CBC-SHA:DHE-DSS-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256:DHE-DSS-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:ECDH-RSA-AES128-GCM-SHA256:ECDH-ECDSA-AES128-GCM-SHA256:ECDH-RSA-AES128-SHA256:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES128-SHA:ECDH-ECDSA-AES128-SHA:AES128-GCM-SHA256:AES128-SHA256:AES128-SHA:IDEA-CBC-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:RC4-SHA:RC4-MD5:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:EXP-RC4-MD5")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
ciphersuites+=("")
Fix client simulation replace ciphers with ch_ciphers and sni with ch_sni in client simulation data file.
2020-01-31 16:49:07 +01:00
ch_sni+=("$SNI")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
warning+=("")
Update client simulation This is a fix for #722. It updates the client simulation data from the SSLlabs API. As usual data was pulled, resorted and clients to display were hand-selected. Wishlist: Missing is Oreo, OpenSSL 1.1.1, Safari on OX 11, Firefox 52.x (ESR) With the recent PR #1033 from @dcooper it can also show TLS 1.3 handshakes.
2018-04-16 11:13:44 +02:00
handshakebytes+=("16030101400100013c0303a30d4fbaac9a8e0c2ddc6359e3b896d2b4c0479afac5b42c6cea919cd35c684800008ec030c02cc028c024c014c00ac022c02100a3009f006b006a00390038c032c02ec02ac026c00fc005009d003d0035c012c008c01cc01b00160013c00dc003000ac02fc02bc027c023c013c009c01fc01e00a2009e0067004000330032c031c02dc029c025c00ec004009c003c002f0007c011c007c00cc002000500040015001200090014001100080006000300ff0100008500000014001200000f6465762e73736c6c6162732e636f6d000b000403000102000a00340032000e000d0019000b000c00180009000a00160017000800060007001400150004000500120013000100020003000f0010001100230000000d0020001e060106020603050105020503040104020403030103020303020102020203000f000101")
Improve SSL native client simulation This PR improves client simulation in "--ssl-native" mode: * It changes ${protos[i]} to list the protocols that should be disabled rather than those that should be enabled, except in the case that the client only supports one protocol. * It sets the values for ${tlsvers[i]}, which is used in run_client_simulation(), but was not defined. * It adds a new variable, ${ciphersuites[i]}, that lists the TLSv1.3 cipher suites supported by a client. Client simulation still produces false results in "--ssl-native" mode, but the results are better than before.
2018-04-10 22:52:38 +02:00
protos+=("-no_ssl2")
tlsvers+=("-tls1_2 -tls1_1 -tls1")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
lowest_protocol+=("0x0300")
highest_protocol+=("0x0303")
service+=("HTTP,FTP")
minDhBits+=(-1)
maxDhBits+=(-1)
minRsaBits+=(-1)
maxRsaBits+=(-1)
minEcdsaBits+=(-1)
Add curve information to SSL native client simulations When performing client simulations in "--ssl-native" mode, provide the client's list of supported curves to "$OPENSSL s_client" in order to make the results even more accurate.
2018-04-11 19:45:24 +02:00
curves+=("sect571r1:sect571k1:secp521r1:sect409k1:sect409r1:secp384r1:sect283k1:sect283r1:secp256k1:prime256v1:sect239k1:sect233k1:sect233r1:secp224k1:secp224r1:sect193r1:sect193r2:secp192k1:prime192v1:sect163k1:sect163r1:sect163r2:secp160k1:secp160r1:secp160r2")
rename client simulation file (das is more consistent) update client simulation: now has every client from SSLlabs and it is properly ordered
2017-08-30 23:00:32 +02:00
requiresSha2+=(false)
current+=(false)
Revert diff noise at end of file
2019-05-06 21:35:58 +02:00