From d14badfd3cb1108b710879a90ae65bd8bff83f62 Mon Sep 17 00:00:00 2001 From: Frank Breedijk Date: Mon, 27 Jun 2016 13:26:15 +0200 Subject: [PATCH] Protocol detection fix for openssl client simulation New approach: try every protocol individually from high to low and stop as soon as one works --- client-simulation-data.sh | 371 ++++++++++++-------------------- testssl.sh | 37 +--- utils/update_client_sim_data.pl | 42 ++-- 3 files changed, 165 insertions(+), 285 deletions(-) diff --git a/client-simulation-data.sh b/client-simulation-data.sh index 6185436..bcfaf6b 100644 --- a/client-simulation-data.sh +++ b/client-simulation-data.sh @@ -10,8 +10,7 @@ ciphers+=("RC4-MD5:RC4-SHA:AES128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:DES- sni+=("") warning+=("") handshakebytes+=("160301004b010000470301531f3de6b36804738bbb94a6ecd570a544789c3bb0a6ef8b9d702f997d928d4b00002000040005002f00330032000a00160013000900150012000300080014001100ff0100") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("HTTP,FTP") @@ -28,8 +27,7 @@ ciphers+=("ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES256-SHA:DHE-DS sni+=("$SNI") warning+=("") handshakebytes+=("16030100c6010000c20301531f479cc7785f455ca7a70142af5be929c1ba931eedbf46dba6b6638da75e95000038c014c00a00390038c00fc0050035c012c00800160013c00dc003000ac013c00900330032c00ec004002fc011c007c00cc0020005000400ff020100006000000014001200000f7777772e73736c6c6162732e636f6d000b000403000102000a00340032000100020003000400050006000700080009000a000b000c000d000e000f00100011001200130014001500160017001800190023000033740000") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("HTTP,FTP") @@ -46,8 +44,7 @@ ciphers+=("ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:SRP-DSS-AES-256-CBC-SHA:S sni+=("$SNI") warning+=("") handshakebytes+=("16030100d7010000d30301531f3f6dd9eb5f6b3586c628cc2cdc82cdb259b1a096237ba4df30dbbc0f26fb000044c014c00ac022c02100390038c00fc0050035c012c008c01cc01b00160013c00dc003000ac013c009c01fc01e00330032c00ec004002fc011c007c00cc0020005000400ff020100006500000014001200000f7777772e73736c6c6162732e636f6d000b000403000102000a00340032000e000d0019000b000c00180009000a00160017000800060007001400150004000500120013000100020003000f0010001100230000000f00010133740000") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("HTTP,FTP") @@ -64,8 +61,7 @@ ciphers+=("ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:SRP-DSS-AES-256-CBC-SHA:S sni+=("$SNI") warning+=("") handshakebytes+=("16030100d1010000cd0301531f40a89e11d5681f563f3dad094375227035d4e9d2c1654d7d3954e3254558000044c014c00ac022c02100390038c00fc0050035c012c008c01cc01b00160013c00dc003000ac013c009c01fc01e00330032c00ec004002fc011c007c00cc0020005000400ff0100006000000014001200000f7777772e73736c6c6162732e636f6d000b000403000102000a00340032000e000d0019000b000c00180009000a00160017000800060007001400150004000500120013000100020003000f001000110023000033740000") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("HTTP,FTP") @@ -82,8 +78,7 @@ ciphers+=("ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:SRP-DSS-AES-256-CBC-SHA:S sni+=("$SNI") warning+=("") handshakebytes+=("16030100d1010000cd0301531f41c3c5110dd688458e5e48e06d30814572ad7b8f9d9df1b0a8820b270685000044c014c00ac022c02100390038c00fc0050035c012c008c01cc01b00160013c00dc003000ac013c009c01fc01e00330032c00ec004002fc011c007c00cc0020005000400ff0100006000000014001200000f7777772e73736c6c6162732e636f6d000b000403000102000a00340032000e000d0019000b000c00180009000a00160017000800060007001400150004000500120013000100020003000f001000110023000033740000") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("HTTP,FTP") @@ -100,8 +95,7 @@ ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-A sni+=("$SNI") warning+=("") handshakebytes+=("16030100d1010000cd0303531f4317998fb70d57feded18c14433a1b665f963f7e3b1b045b6cc3d61bf21300004cc030c02cc014c00a00a3009f006b006a00390038009d003d0035c012c00800160013000ac02fc02bc027c023c013c00900a2009e0067004000330032009c003c002fc011c0070005000400ff0100005800000014001200000f7777772e73736c6c6162732e636f6d000b00020100000a0008000600190018001700230000000d00220020060106020603050105020503040104020403030103020303020102020203010133740000") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -118,8 +112,7 @@ ciphers+=("ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-CHA sni+=("$SNI") warning+=("") handshakebytes+=("16030100bd010000b9030354c21737f3d9d10696c91debf12415f9c45833a83cfbbd4c60c9b91407d2316b000038cc14cc13cc15c014c00a003900380035c012c00800160013000ac02fc02bc013c00900a2009e00330032009c002fc011c0070005000400ff0100005800000014001200000f6465762e73736c6c6162732e636f6d00230000000d00220020060106020603050105020503040104020403030103020303020102020203010133740000000b00020100000a00080006001900180017") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -136,8 +129,7 @@ ciphers+=("ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-CHA sni+=("$SNI") warning+=("") handshakebytes+=("16030100e2010000de030352f98411589cd6cd9dd403e70b1685b464a1d8c7495214d2c29b557738599f3420706946c402bf34b6356bfa5979bc3c65e1979a8fc632c201e976fef1ec3d55870022cc14cc13cc15c02bc02f009ec00ac0140039c009c0130033009c0035002f000a00ff0100007300000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d001600140601060305010503040104030301030302010203000500050100000000337400000012000000100014001208687474702f312e3108737064792f332e31000b00020100000a0006000400170018") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -154,8 +146,7 @@ ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:D sni+=("$SNI") warning+=("") handshakebytes+=("16030100a30100009f030154c1a814c755540538a93b25e7824623d0ee9fc294ee752869cf76819edb3aa200004800ffc00ac0140088008700390038c00fc00500840035c007c009c011c0130045004400330032c00cc00ec002c0040096004100040005002fc008c01200160013c00dc003feff000a0100002e00000014001200000f6465762e73736c6c6162732e636f6d000a00080006001700180019000b0002010000230000") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("HTTP,FTP") @@ -172,8 +163,7 @@ ciphers+=("AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-SHA:ECDHE sni+=("") warning+=("") handshakebytes+=("160301005e0100005a030152a6b6912f40c56ac64206dc1409e8758b812f7076cf5ffd8d55a616681e551e000018002f00350005000ac013c014c009c00a003200380013000401000019ff01000100000a0006000400170018000b0002010000230000") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("HTTP,FTP") @@ -190,8 +180,7 @@ ciphers+=("DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256-SHA:EDH-RSA-DES-CBC3-SHA sni+=("$SNI") warning+=("") handshakebytes+=("16030100700100006c030152a5abea96fe047222610094b2d13a7e0dea51181fa2c417dec9706757a9958800002a00390038003500160013000a00330032002f0007000500040015001200090014001100080006000300ff020100001800000014001200000f7777772e73736c6c6162732e636f6d") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("HTTP,FTP") @@ -208,8 +197,7 @@ ciphers+=("DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256-SHA:EDH-RSA-DES-CBC3-SHA sni+=("$SNI") warning+=("") handshakebytes+=("16030100700100006c030153ad3c76315cf735e16a170784cdc7d52012aa10eb6a85625ed6cac5e1af286500002a00390038003500160013000a00330032002f0007000500040015001200090014001100080006000300ff020100001800000014001200000f6465762e73736c6c6162732e636f6d") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("HTTP,FTP") @@ -226,8 +214,7 @@ ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-A sni+=("$SNI") warning+=("") handshakebytes+=("16030101510100014d030354c13b79c1ca7169ae70c45d43311f9290d8ac1e326dfc36ff0aa99ea85406d50000a0c030c02cc028c024c014c00ac022c02100a3009f006b006a0039003800880087c032c02ec02ac026c00fc005009d003d00350084c012c008c01cc01b00160013c00dc003000ac02fc02bc027c023c013c009c01fc01e00a2009e0067004000330032009a009900450044c031c02dc029c025c00ec004009c003c002f009600410007c011c007c00cc002000500040015001200090014001100080006000300ff020100008300000014001200000f6465762e73736c6c6162732e636f6d000b000403000102000a00340032000e000d0019000b000c00180009000a00160017000800060007001400150004000500120013000100020003000f00100011000d002200200601060206030501050205030401040204030301030203030201020202030101000f000101") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -244,8 +231,7 @@ ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:D sni+=("$SNI") warning+=("") handshakebytes+=("16030100b9010000b5030251d1589cbb4af03c585fadf8741670b304c96b6b9cd67a9972f2f117199994ee000048c00ac0140088008700390038c00fc00500840035c007c009c011c01300450044006600330032c00cc00ec002c0040096004100050004002fc008c01200160013c00dc003feff000a0100004400000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000754f0000000500050100000000") -protos+=("-no_ssl2 -ssl3 -no_tls1_2") -tlsvers+=("-tls1_1 -tls1") +protos+=("-tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0302") service+=("HTTP,FTP") @@ -262,8 +248,7 @@ ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:D sni+=("$SNI") warning+=("") handshakebytes+=("16030100b9010000b5030251fa2a84056d23d8eda90a57fa8fce1fdca180e4b63f78792ea67f3c0abfe2d4000048c00ac0140088008700390038c00fc00500840035c007c009c011c01300450044006600330032c00cc00ec002c0040096004100050004002fc008c01200160013c00dc003feff000a0100004400000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000754f0000000500050100000000") -protos+=("-no_ssl2 -ssl3 -no_tls1_2") -tlsvers+=("-tls1_1 -tls1") +protos+=("-tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0302") service+=("HTTP,FTP") @@ -280,8 +265,7 @@ ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:DHE-RS sni+=("$SNI") warning+=("") handshakebytes+=("16030100900100008c030252417a5a280a06236420ca1a916bd1a4a0ca397d0908a11db51dd12d066ce245000028c00ac0140039006b0035003dc007c009c023c011c013c02700330067003200050004002f003c000a0100003b00000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000754f0000") -protos+=("-no_ssl2 -ssl3 -no_tls1_2") -tlsvers+=("-tls1_1 -tls1") +protos+=("-tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0302") service+=("HTTP,FTP") @@ -298,8 +282,7 @@ ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:DHE-RS sni+=("$SNI") warning+=("") handshakebytes+=("16030100d5010000d10303524d3fba0440d42fbbb01d702ba9c041d2fc697f83288c1713d98204266c6dc3000028c00ac0140039006b0035003dc007c009c023c011c013c02700330067003200050004002f003c000a0100008000000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b00020100002300003374000000100022002006737064792f3206737064792f3308737064792f332e3108687474702f312e31754f0000000500050100000000000d0012001004010501020104030503020304020202") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -316,8 +299,7 @@ ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES sni+=("$SNI") warning+=("") handshakebytes+=("16030100d1010000cd03035289e11a35cdb85cdc0b754c295ad207ca69931bc1a24b7fac2bf505beeb07a3000024c02bc02f009e009cc00ac01400390035c007c009c011c0130033003200050004002f000a0100008000000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b00020100002300003374000000100022002006737064792f3206737064792f3308737064792f332e3108687474702f312e31754f0000000500050100000000000d0012001004010501020104030503020304020202") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -334,8 +316,7 @@ ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES sni+=("$SNI") warning+=("") handshakebytes+=("16030100d1010000cd030352dd2a2fa57a2b28556990f7a165d98ee6db68a58e3fe03a63f1e49660f683da000024c02bc02f009e009cc00ac01400390035c007c009c011c0130033003200050004002f000a0100008000000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b00020100002300003374000000100022002006737064792f3206737064792f3308737064792f332e3108687474702f312e31754f0000000500050100000000000d0012001004010501020104030503020304020202") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -352,8 +333,7 @@ ciphers+=("ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA sni+=("$SNI") warning+=("") handshakebytes+=("16030100d2010000ce030353199d5b3e169e9dde7fa14fd1338ade91887c70040e39117dc261b29de21852000028cc14cc13c02bc02f009e009cc00ac01400390035c007c009c011c0130033003200050004002f000a0100007d00000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b0002010000230000337400000010001b001906737064792f3308737064792f332e3108687474702f312e3175500000000500050100000000000d001200100401050102010403050302030402020200120000") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -370,8 +350,7 @@ ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES sni+=("$SNI") warning+=("") handshakebytes+=("16030100d2010000ce0303e4165a3865ece64acaa5f86ffaf810f345cd516c25688f191d0356f175f9e2c5000028c02bc02f009ecc14cc13c00ac009c013c014c007c011003300320039009c002f0035000a000500040100007d00000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b0002010000230000337400000010001b001906737064792f3308737064792f332e3108687474702f312e3175500000000500050100000000000d001200100401050102010403050302030402020200120000") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -388,8 +367,7 @@ ciphers+=("ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA sni+=("$SNI") warning+=("") handshakebytes+=("16030100d2010000ce03032cb92528d05b1cf32e6b5384a7d39ddf0908f656e4572520c5bac4bf96621434000028cc14cc13c02bc02f009ec00ac009c013c014c007c011003300320039009c002f0035000a000500040100007d00000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b0002010000230000337400000010001b001906737064792f3308737064792f332e3108687474702f312e3175500000000500050100000000000d001200100401050102010403050302030402020200120000") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -406,8 +384,7 @@ ciphers+=("ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA sni+=("$SNI") warning+=("") handshakebytes+=("16030100d2010000ce03032466f5db5320e055ed5aad2d86eccf3a9b4d07e1b1cdce8cb86c635d45c8449a000028cc14cc13c02bc02f009ec00ac009c013c014c007c011003300320039009c002f0035000a000500040100007d00000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b0002010000230000337400000010001b001906737064792f3308737064792f332e3108687474702f312e317550000000050005010000000000120000000d0012001004010501020104030503020304020202") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -424,8 +401,7 @@ ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES sni+=("$SNI") warning+=("") handshakebytes+=("16030100d2010000ce0303a210a65d166b4f98899fe70b3ab274c941fab765b91fa37f77dde1844a9721c9000028c02bc02f009ecc14cc13c00ac009c013c014c007c011003300320039009c002f0035000a000500040100007d00000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b0002010000230000337400000010001b001906737064792f3308737064792f332e3108687474702f312e317550000000050005010000000000120000000d0012001004010501020104030503020304020202") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -442,8 +418,7 @@ ciphers+=("ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:DHE-RSA-AES sni+=("$SNI") warning+=("") handshakebytes+=("16030100d3010000cf0303b7fa18a5509607700fb70acc290b717322d66bfc899a662b2746e1741cf4e74000002ac02fc02b009ecc14cc13cc15c014c00a0039c013c0090033c011c007009c0035002f00050004000a00ff0100007c00000014001200000f6465762e73736c6c6162732e636f6d00230000000d00160014060106030501050304010403030103030201020300050005010000000033740000001200000010001b001908687474702f312e3106737064792f3308737064792f332e3175500000000b00020100000a00080006001700180019") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -460,8 +435,7 @@ ciphers+=("ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:DHE-RSA-AES sni+=("$SNI") warning+=("") handshakebytes+=("16030100d0010000cc030377d43ab02ced3617a218bb7313d9f271111f4d4f92b2d4d532e79c243ba0221500002ac02fc02b009ecc14cc13cc15c014c00a0039c013c0090033c011c007009c0035002f00050004000a00ff0100007900000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d001600140601060305010503040104030301030302010203000500050100000000337400000012000000100014001208687474702f312e3108737064792f332e3175500000000b00020100000a00080006001700180019") -protos+=("-no_ssl2 -no_ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1") lowest_protocol+=("0x0301") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -478,8 +452,7 @@ ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES sni+=("$SNI") warning+=("") handshakebytes+=("16030100d4010000d0030387a11416629548eab673e8e89c34252810ae36dd940f1649e67a8cb34655e1e700002ac02bc02f009ecc14cc13cc15c00ac0140039c009c0130033c007c011009c0035002f00050004000a00ff0100007d00000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d00160014060106030501050304010403030103030201020300050005010000000033740000001200000010001a001808687474702f312e3108737064792f332e310568322d313475500000000b00020100000a0006000400170018") -protos+=("-no_ssl2 -no_ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1") lowest_protocol+=("0x0301") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -496,8 +469,7 @@ ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES sni+=("$SNI") warning+=("") handshakebytes+=("16030100cf010000cb03033d87f93d7c4c1b021da6c5e2e9fe02ec0aee76ede29835ffb55c28571933c60b000022c02bc02f009ecc14cc13cc15c00ac0140039c009c0130033009c0035002f000a00ff0100008000000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d00160014060106030501050304010403030103030201020300050005010000000033740000001200000010001d001b08687474702f312e3108737064792f332e310568322d313402683275500000000b00020100000a0006000400170018") -protos+=("-no_ssl2 -no_ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1") lowest_protocol+=("0x0301") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -514,8 +486,7 @@ ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES sni+=("$SNI") warning+=("") handshakebytes+=("16030100cf010000cb0303ee7b22a8ec3bbae266ee164ca54dbff70de23513d137fc78ba7ef975763312dc000022c02bc02f009ecc14cc13cc15c00ac0140039c009c0130033009c0035002f000a00ff0100008000000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d00160014060106030501050304010403030103030201020300050005010000000033740000001200000010001d001b08687474702f312e3108737064792f332e310568322d313402683275500000000b00020100000a0006000400170018") -protos+=("-no_ssl2 -no_ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1") lowest_protocol+=("0x0301") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -532,8 +503,7 @@ ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES sni+=("$SNI") warning+=("") handshakebytes+=("16030100ca010000c6030361f8858af23cda649baf596105ec66bfe5b4642046c486e3e5321b26588392f400001ec02bc02f009ecc14cc13c00ac0140039c009c0130033009c0035002f000a0100007fff0100010000000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d001600140601060305010503040104030301030302010203000500050100000000337400000012000000100017001508687474702f312e3108737064792f332e3102683275500000000b00020100000a0006000400170018") -protos+=("-no_ssl2 -no_ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1") lowest_protocol+=("0x0301") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -550,8 +520,7 @@ ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES sni+=("$SNI") warning+=("") handshakebytes+=("16030100ca010000c603037ac82baca9c0d08b1a01ecfb0bf5824f195153e0c6b4b48f5bf4621846376e8a00001ec02bc02f009ecc14cc13c00ac0140039c009c0130033009c0035002f000a0100007fff0100010000000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d001600140601060305010503040104030301030302010203000500050100000000337400000012000000100017001502683208737064792f332e3108687474702f312e3175500000000b00020100000a0006000400170018") -protos+=("-no_ssl2 -no_ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1") lowest_protocol+=("0x0301") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -568,8 +537,7 @@ ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA sni+=("$SNI") warning+=("") handshakebytes+=("16030100c8010000c40303699c8a4e3834651e3cfcb22fa744ce5ce607e584a16f527d30f8af8a4dbea42100001cc02bc02fcca9cca8cc14cc13c00ac014c009c013009c0035002f000a0100007fff0100010000000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d001600140601060305010503040104030301030302010203000500050100000000337400000012000000100017001502683208737064792f332e3108687474702f312e3175500000000b00020100000a0006000400170018") -protos+=("-no_ssl2 -no_ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1") lowest_protocol+=("0x0301") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -586,8 +554,7 @@ ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA sni+=("$SNI") warning+=("") handshakebytes+=("16030100c6010000c20303ff4e7eb1ce359979138cc297b9911c45cd06b1928e4356132844309a471c3c9700001cc02bc02fcca9cca8cc14cc13c00ac014c009c013009c0035002f000a0100007dff0100010000000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d0012001006010603050105030401040302010203000500050100000000337400000012000000100017001502683208737064792f332e3108687474702f312e3175500000000b00020100000a00080006001d00170018") -protos+=("-no_ssl2 -no_ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1") lowest_protocol+=("0x0301") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -604,8 +571,7 @@ ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA sni+=("$SNI") warning+=("") handshakebytes+=("16030100bf010000bb030355079db3b53ce2a6d3335902717ae6a84cc4b855d0b68775ac287f38da343c55000022c02bc02fc02cc030cca9cca8cc14cc13c009c013c00ac014009c009d002f0035000a01000070ff0100010000000014001200000f6465762e73736c6c6162732e636f6d0017000000230000000d0012001006010603050105030401040302010203000500050100000000001200000010000e000c02683208687474702f312e3175500000000b00020100000a00080006001d00170018") -protos+=("-no_ssl2 -no_ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1") lowest_protocol+=("0x0301") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -622,8 +588,7 @@ ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:D sni+=("$SNI") warning+=("") handshakebytes+=("16030100a7010000a3030151d159b5c6a8e2e432e4fa5be54b0850bd809efe70e824293c882203f0ee1d6800004800ffc00ac0140088008700390038c00fc00500840035c007c009c011c0130045004400330032c00cc00ec002c0040096004100050004002fc008c01200160013c00dc003feff000a0100003200000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b000201000023000033740000") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("HTTP,FTP") @@ -640,8 +605,7 @@ ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:D sni+=("$SNI") warning+=("") handshakebytes+=("16030100a30100009f030151fa38b87e68fb3b8c0fb02f6c7142e53e4fcb69cdd10296088ecc001e9bcebc00004800ffc00ac0140088008700390038c00fc00500840035c007c009c011c0130045004400330032c00cc00ec002c0040096004100050004002fc008c01200160013c00dc003feff000a0100002e00000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b0002010000230000") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("HTTP,FTP") @@ -658,8 +622,7 @@ ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:D sni+=("$SNI") warning+=("") handshakebytes+=("16030100a7010000a3030151fa3041dd8c81c89fd6434776d3c39f3b8305fb116a567e219054e63b8e21a000004800ffc00ac0140088008700390038c00fc00500840035c007c009c011c0130045004400330032c00cc00ec002c0040096004100050004002fc008c01200160013c00dc003feff000a0100003200000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b000201000023000033740000") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("HTTP,FTP") @@ -676,8 +639,7 @@ ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:D sni+=("$SNI") warning+=("") handshakebytes+=("16030100a7010000a3030152dd2828d1ee0481eedaff7c5edb64b528976fb7766e51404058e7666f72785c00004800ffc00ac0140088008700390038c00fc00500840035c009c007c013c0110045004400330032c00ec00cc004c00200960041002f00050004c008c01200160013c00dc003feff000a0100003200000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b000201000023000033740000") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("HTTP,FTP") @@ -694,8 +656,7 @@ ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA sni+=("$SNI") warning+=("") handshakebytes+=("16030100b1010000ad030357ce74b9799a67f62ffd7f53fde81675039c3597b2b17f9e18dbbbd418dd68f600002ec02bc02fc00ac009c013c014c012c007c0110033003200450039003800880016002f004100350084000a000500040100005600000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000000500050100000000000d0012001004010501020104030503020304020202") -protos+=("-no_ssl2 -no_ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1") lowest_protocol+=("0x0301") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -712,8 +673,7 @@ ciphers+=("DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:DH sni+=("$SNI") warning+=("") handshakebytes+=("16030100b3010000af030151fa34e8a9deb1b23f2cae528c633c4ac28931d1afb8b01215bc2980ed312a5a00002800ff00880087003900380084003500450044003300320096004100050004002f00160013feff000a0100005e00000014001200000f7777772e73736c6c6162732e636f6d000a00340032000100020003000400050006000700080009000a000b000c000d000e000f0010001100120013001400150016001700180019000b000201000023000033740000") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("HTTP,FTP") @@ -730,8 +690,7 @@ ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:D sni+=("$SNI") warning+=("") handshakebytes+=("16030100aa010000a6030151fa2a72a6fa6d27feae3564b74d29a9cbaa7d432f5f6e5182d2bd25abb3b04a000046c00ac0140088008700390038c00fc00500840035c007c009c011c0130045004400330032c00cc00ec002c0040096004100050004002fc008c01200160013c00dc003feff000a0100003700000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("HTTP,FTP") @@ -748,8 +707,7 @@ ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:D sni+=("$SNI") warning+=("") handshakebytes+=("16030100a7010000a30301524d3e9effcb3d4ce13ee947036f9ef09aec0c2777b85432c1919369cad529fe00004800ffc00ac0140088008700390038c00fc00500840035c007c009c011c0130045004400330032c00cc00ec002c0040096004100050004002fc008c01200160013c00dc003feff000a0100003200000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b000201000023000033740000") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("HTTP,FTP") @@ -766,8 +724,7 @@ ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:D sni+=("$SNI") warning+=("") handshakebytes+=("16030100b0010000ac030152dd2b8ca1a308011744a36c449e52073f2fa2ff5de5e519c2e49e4340f2947b00004800ffc00ac0140088008700390038c00fc00500840035c009c007c013c0110045004400330032c00ec00cc004c00200960041002f00050004c008c01200160013c00dc003feff000a0100003b00000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b000201000023000033740000000500050100000000") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("HTTP,FTP") @@ -784,8 +741,7 @@ ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA sni+=("$SNI") warning+=("") handshakebytes+=("16030100b1010000ad0303eeedb1be0ed186b504a00a13984c3c1c2dfb93939e9a16b93940773db285d61000002ec02bc02fc00ac009c013c014c012c007c0110033003200450039003800880016002f004100350084000a000500040100005600000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000000500050100000000000d0012001004010501020104030503020304020202") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -802,8 +758,7 @@ ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA sni+=("$SNI") warning+=("") handshakebytes+=("16030100b1010000ad0303e012d5c38373bd43274cba6ec28a56efa53a7e3e1bf620eaed21834b1bdc1f5a00002ec02bc02fc00ac009c013c014c012c007c0110033003200450039003800880016002f004100350084000a000500040100005600000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000000500050100000000000d0012001004010501020104030503020304020202") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -820,8 +775,7 @@ ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA sni+=("$SNI") warning+=("") handshakebytes+=("16030100b1010000ad0303a7c35330633163ae4ca49796f648b005ee025112f17a7ef65117d54ee28602f400002ec02bc02fc00ac009c013c014c012c007c0110033003200450039003800880016002f004100350084000a000500040100005600000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000000500050100000000000d0012001004010501020104030503020304020202") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -838,8 +792,7 @@ ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA sni+=("$SNI") warning+=("") handshakebytes+=("16030100b1010000ad03037daa4f4c8ca7922e261ce0a620d7220e42b0a5761733e8791e8b52a12524b0dc00002ec02bc02fc00ac009c013c014c012c007c0110033003200450039003800880016002f004100350084000a000500040100005600000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000000500050100000000000d0012001004010501020104030503020304020202") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -856,8 +809,7 @@ ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA sni+=("$SNI") warning+=("") handshakebytes+=("16030100b1010000ad03035813901f246379098c8d653c1f4e8efa78b110c4a7224ee5a94ac00b312045c300002ec02bc02fc00ac009c013c014c012c007c0110033003200450039003800880016002f004100350084000a000500040100005600000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000000500050100000000000d0012001004010501020104030503020304020202") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -874,8 +826,7 @@ ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA sni+=("$SNI") warning+=("") handshakebytes+=("16030100c2010000be030316d5f2760b6b1369dc25b8d0bbc6bd17099f30a769d7396e877790e980587f7c000020c02bc02fc00ac009c013c014c007c011003300320039002f0035000a000500040100007500000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b0002010000230000337400000010001b001908737064792f332e3106737064792f3308687474702f312e31000500050100000000000d0012001004010501020104030503020304020202") -protos+=("-no_ssl2 -no_ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1") lowest_protocol+=("0x0301") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -892,8 +843,7 @@ ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA sni+=("$SNI") warning+=("") handshakebytes+=("16030100c8010000c40303d424604e56a4f359779595c71a8079613619e70e74511422525271b272d8a2e6000020c02bc02fc00ac009c013c014c007c011003300320039002f0035000a000500040100007b00000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b00020100002300003374000000100021001f0568322d313408737064792f332e3106737064792f3308687474702f312e31000500050100000000000d0012001004010501020104030503020304020202") -protos+=("-no_ssl2 -no_ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1") lowest_protocol+=("0x0301") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -910,8 +860,7 @@ ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA sni+=("$SNI") warning+=("") handshakebytes+=("16030100c6010000c20303559dff0127b42a68e274b8fc4b53c406200a28b8fb4d054274cc565a162b2cf4000016c02bc02fc00ac009c013c01400330039002f0035000a0100008300000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b0002010000230000337400000010002900270568322d31360568322d31350568322d313402683208737064792f332e3108687474702f312e31000500050100000000000d0012001004010501020104030503020304020202") -protos+=("-no_ssl2 -no_ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1") lowest_protocol+=("0x0301") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -928,8 +877,7 @@ ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA sni+=("$SNI") warning+=("") handshakebytes+=("16030100ca010000c60303efbbb1f18b9dd3e9fcf18cd01a52c517a47f65675e10f9492b6ec337885e8f4a000016c02bc02fc00ac009c013c01400330039002f0035000a0100008700000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b0002010000230000337400000010002900270568322d31360568322d31350568322d313402683208737064792f332e3108687474702f312e31000500050100000000000d001600140401050106010201040305030603020304020202") -protos+=("-no_ssl2 -no_ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1") lowest_protocol+=("0x0301") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -946,8 +894,7 @@ ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA sni+=("$SNI") warning+=("") handshakebytes+=("16030100b8010000b403037cc4fdb0a8ca09368879a9089201137186ba8a19cc56a83aa7b5db776e7cf936000016c02bc02fc00ac009c013c01400330039002f0035000a0100007500000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b00020100002300003374000000100017001502683208737064792f332e3108687474702f312e31000500050100000000000d001600140401050106010201040305030603020304020202") -protos+=("-no_ssl2 -no_ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1") lowest_protocol+=("0x0301") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -964,8 +911,7 @@ ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA sni+=("$SNI") warning+=("") handshakebytes+=("16030100b8010000b403038abe51f10e414011c88d4807c3cf465ae02ba1ef74dd1d59a0b8f04c4f13c969000016c02bc02fc00ac009c013c01400330039002f0035000a0100007500000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b00020100002300003374000000100017001502683208737064792f332e3108687474702f312e31000500050100000000000d001600140401050106010201040305030603020304020202") -protos+=("-no_ssl2 -no_ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1") lowest_protocol+=("0x0301") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -982,8 +928,7 @@ ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA sni+=("$SNI") warning+=("") handshakebytes+=("16030100b8010000b403038d3e6929d322af321fc324639a0adf67c7f8e798b4b74e7ec1627fca71a76fbb000016c02bc02fc00ac009c013c01400330039002f0035000a0100007500000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b00020100002300003374000000100017001502683208737064792f332e3108687474702f312e31000500050100000000000d001600140401050106010201040305030603020304020202") -protos+=("-no_ssl2 -no_ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1") lowest_protocol+=("0x0301") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -1000,8 +945,7 @@ ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA sni+=("$SNI") warning+=("") handshakebytes+=("16030100d8010000d40303c45b58b30c163444fbca2e8a1832e5a36999712fa83d7ff6b6c13d5a22181e7f205fd10ae0807128c0c0ede2914316ac6b777e529c1f0e89c849cdf0cbde26efa00016c02bc02fc00ac009c013c01400330039002f0035000a0100007500000014001200000f6465762e73736c6c6162732e636f6dff01000100000a00080006001700180019000b00020100002300003374000000100017001502683208737064792f332e3108687474702f312e31000500050100000000000d001600140401050106010201040305030603020304020202") -protos+=("-no_ssl2 -no_ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1") lowest_protocol+=("0x0301") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -1018,8 +962,7 @@ ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA sni+=("$SNI") warning+=("") handshakebytes+=("16030100bc010000b8030332260ce2eccf67fb7444d64dcefb92a46e78801f135fe4d44acc1052af1b56b2000016c02bc02fc00ac009c013c01400330039002f0035000a0100007900000014001200000f6465762e73736c6c6162732e636f6d00170000ff01000100000a00080006001700180019000b00020100002300003374000000100017001502683208737064792f332e3108687474702f312e31000500050100000000000d001600140401050106010201040305030603020304020202") -protos+=("-no_ssl2 -no_ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1") lowest_protocol+=("0x0301") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -1036,8 +979,7 @@ ciphers+=("ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RS sni+=("$SNI") warning+=("") handshakebytes+=("16030100b6010000b203015267881356b382cb8779331e85b5e77ef8c0c6d30c0bdcfef87145866912d59f000024c007c011c009c013c00ac01400050004002f000a003500330032001600130039003800ff0100006500000014001200000f7777772e73736c6c6162732e636f6d000b000403000102000a00340032000e000d0019000b000c00180009000a00160017000800060007001400150004000500120013000100020003000f0010001100230000000f00010133740000") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("HTTP,FTP") @@ -1054,8 +996,7 @@ ciphers+=("ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RS sni+=("$SNI") warning+=("") handshakebytes+=("16030100b1010000ad0301b2da3708a1b55eb24ba0e985702f5823854fe9d5752d4ad948270343ef7a92d9000024c007c011c009c013c00ac01400050004002f000a003500330032001600130039003800ff0100006000000014001200000f6465762e73736c6c6162732e636f6d0023000033740000000b000403000102000a00340032000e000d0019000b000c00180009000a00160017000800060007001400150004000500120013000100020003000f00100011") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("HTTP,FTP") @@ -1072,8 +1013,7 @@ ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA sni+=("$SNI") warning+=("") handshakebytes+=("16030100db010000d70303d9c72e000f6a7f0a156840bd4aa9fd0612df4aeb69a1a1c6452c5f1f4d0ba6b000002ac02bc02fc007c011c009c013c00ac014009c00050004002f000a003500330032001600130039003800ff0100008400000014001200000f6465762e73736c6c6162732e636f6d00230000000d0020001e06010602060305010502050304010402040303010302030302010202020333740000000b000403000102000a00340032000e000d0019000b000c00180009000a00160017000800060007001400150004000500120013000100020003000f00100011") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -1090,8 +1030,7 @@ ciphers+=("RC4-MD5:RC4-SHA:DES-CBC3-SHA:RC4-MD5:DES-CBC3-MD5:RC2-CBC-MD5:DES-CBC sni+=("") warning+=("") handshakebytes+=("804c01030000330000001000000400000500000a0100800700c003008000000906004000006400006200000300000602008004008000001300001200006317411550ac4c45ccbc8f4538dbc56d3a") -protos+=("-ssl2 -ssl3 -no_tls1 -no_tls1_1 -no_tls1_2") -tlsvers+=("") +protos+=("-ssl3 -ssl2") lowest_protocol+=("0x0200") highest_protocol+=("0x0300") service+=("HTTP,FTP") @@ -1108,8 +1047,7 @@ ciphers+=("RC4-MD5:RC4-SHA:DES-CBC3-SHA:RC4-MD5:DES-CBC3-MD5:RC2-CBC-MD5:DES-CBC sni+=("") warning+=("") handshakebytes+=("804f01030000360000001000000400000500000a0100800700c00300800000090600400000640000620000030000060200800400800000130000120000630000ffd9f61eed63ba552d0bca94dc016081a3") -protos+=("-ssl2 -ssl3 -no_tls1 -no_tls1_1 -no_tls1_2") -tlsvers+=("") +protos+=("-ssl3 -ssl2") lowest_protocol+=("0x0200") highest_protocol+=("0x0300") service+=("HTTP,FTP") @@ -1126,8 +1064,7 @@ ciphers+=("AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:ECDHE-ECDSA-AES128-SHA:ECD sni+=("$SNI") warning+=("") handshakebytes+=("160301007d01000079030151fa62ab452795b7003c5f93ab677dbf57dd62bfa39e0ffaaeabe45b06552452000018002f00350005000ac009c00ac013c01400320038001300040100003800000014001200000f7777772e73736c6c6162732e636f6d000500050100000000000a00080006001700180019000b00020100ff01000100") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("HTTP,FTP") @@ -1144,8 +1081,7 @@ ciphers+=("RC4-MD5:RC4-SHA:DES-CBC3-SHA:DES-CBC-SHA:EXP1024-RC4-SHA:EXP1024-DES- sni+=("") warning+=("") handshakebytes+=("16030100410100003d030151fa5ac223f1d72558e48bb4f144baa494403ca6c360349cbd1449997d8dd1ec00001600040005000a000900640062000300060013001200630100") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("HTTP,FTP") @@ -1162,8 +1098,7 @@ ciphers+=("RC4-MD5:RC4-SHA:DES-CBC3-SHA:DES-CBC-SHA:EXP1024-RC4-SHA:EXP1024-DES- sni+=("") warning+=("") handshakebytes+=("1603010048010000440301550bf46d2cff1997bd24885e963ba61faa8be6c28835c1f9bf74c1675cd3cf8500001600040005000a0009006400620003000600130012006301000005ff01000100") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("HTTP,FTP") @@ -1180,8 +1115,7 @@ ciphers+=("AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-SHA:ECDHE sni+=("$SNI") warning+=("") handshakebytes+=("160301007b01000077030151facea9bfdefb38bc40987322ebdc092498fc6e64e491683abd95179ea8405c000018002f00350005000ac013c014c009c00a003200380013000401000036ff0100010000000014001200000f7777772e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("HTTP,FTP") @@ -1198,8 +1132,7 @@ ciphers+=("AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-SHA:ECDHE sni+=("$SNI") warning+=("") handshakebytes+=("160301007b01000077030151facc6695164fc3429414f5926b8d794b56dcb2e1e45825575ed12406fd8cf5000018002f00350005000ac013c014c009c00a003200380013000401000036ff0100010000000014001200000f7777772e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("HTTP,FTP") @@ -1216,8 +1149,7 @@ ciphers+=("AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-SHA:ECDHE sni+=("$SNI") warning+=("") handshakebytes+=("160301007b01000077030151d156b7a2f14154f4e58272d8e272392bb33c1110f21d3b7a3ea2b09fb14c5a000018002f00350005000ac013c014c009c00a003200380013000401000036ff0100010000000014001200000f7777772e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("HTTP,FTP") @@ -1234,8 +1166,7 @@ ciphers+=("ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:AES256-SHA:AES128-SHA:ECDHE sni+=("$SNI") warning+=("") handshakebytes+=("160301007d01000079030155f092059b76ac28cceda732dac7f07a52aecc126f8ed890ab80e12e7eca049c000018c014c0130035002fc00ac00900380032000a0013000500040100003800000014001200000f6465762e73736c6c6162732e636f6d000500050100000000000a00080006001700180019000b00020100ff01000100") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("HTTP,FTP") @@ -1252,8 +1183,7 @@ ciphers+=("AES128-SHA256:AES128-SHA:AES256-SHA256:AES256-SHA:RC4-SHA:DES-CBC3-SH sni+=("$SNI") warning+=("") handshakebytes+=("16030300a10100009d0303528113a0e622051411874ae3411d7e9f63c4f2671cec1d9c87f2654f88c1bed400002a003c002f003d00350005000ac027c013c014c02bc023c02cc024c009c00a00400032006a0038001300040100004aff0100010000000014001200000f7777772e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100000d0010000e0401050102010403050302030202") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -1270,8 +1200,7 @@ ciphers+=("ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA: sni+=("$SNI") warning+=("") handshakebytes+=("16030300b1010000ad030354c22c0a4842eab5a1a10763a3c16df20357f1ba3fac1c67136e09bfa94c5c0f000034c028c027c014c013009f009e009d009c003d003c0035002fc02cc02bc024c023c00ac009006a004000380032000a00130005000401000050ff0100010000000014001200000f6465762e73736c6c6162732e636f6d000500050100000000000a00080006001700180019000b00020100000d00140012040105010601020104030503060302030202") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -1288,8 +1217,7 @@ ciphers+=("ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA: sni+=("$SNI") warning+=("") handshakebytes+=("16030300b1010000ad03035534fefa165ba17d2139c1352331ea86b1c252352d208cb00568fd0a6fec27be000034c028c027c014c013009f009e009d009cc02cc02bc024c023c00ac009003d003c0035002f006a004000380032000a0013000500040100005000000014001200000f6465762e73736c6c6162732e636f6d000500050100000000000a00080006001700180019000b00020100000d00140012060106030401050102010403050302030202ff01000100") -protos+=("-no_ssl2 -no_ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1") lowest_protocol+=("0x0301") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -1306,8 +1234,7 @@ ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES sni+=("$SNI") warning+=("") handshakebytes+=("16030300BF010000BB0303542C787B4571BC82C90182FCA70DE4903C2A6AD38F7541731DBC8117A27ED8E4000034C030C02FC028C027C014C013009F009E009D009C003D003C0035002FC02CC02BC024C023C00AC009006A004000380032000A00130100005EFF010001000000000F000D00000A62617964656E2E636F6D000500050100000000000A0006000400170018000B00020100000D0010000E04010501020104030503020302020023000000100011000F0568322D313408687474702F312E31") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -1324,8 +1251,7 @@ ciphers+=("AES128-SHA256:AES128-SHA:AES256-SHA256:AES256-SHA:DES-CBC3-SHA:ECDHE- sni+=("$SNI") warning+=("") handshakebytes+=("16030300bb010000b7030352678fd707022be386508c7e5837f03bcb1b91c372733322f87872ff873af1db000026003c002f003d0035000ac027c013c014c02bc023c02cc024c009c00a00400032006a0038001301000068ff0100010000000014001200000f7777772e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100000d0010000e04010501020104030503020302020023000000100012001006737064792f3308687474702f312e3133740000") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -1342,8 +1268,7 @@ ciphers+=("ECDHE-RSA-AES256-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM- sni+=("$SNI") warning+=("") handshakebytes+=("16030300c5010000c10303539eb3ef9bf457390eb1cd622d497cbd8a61df47a1d00cad1316e52991068368000030c028009f009e009d009cc02bc023c027c014c013003d003c0035002fc02cc024c00ac009006a004000380032000a001301000068ff0100010000000014001200000f6465762e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100000d0010000e04010501020104030503020302020023000000100012001006737064792f3308687474702f312e3133740000") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -1360,8 +1285,7 @@ ciphers+=("ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA: sni+=("$SNI") warning+=("") handshakebytes+=("16030300c9010000c5030354c2762b36f52478eb8189a72c56a69e9a240c099666287c66aef0f4c2ccb99b000030c028c027c014c013009f009e009d009c003d003c0035002fc02cc02bc024c023c00ac009006a004000380032000a00130100006cff0100010000000014001200000f6465762e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100000d001400120401050106010201040305030603020302020023000000100012001006737064792f3308687474702f312e3133740000") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -1378,8 +1302,7 @@ ciphers+=("ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA: sni+=("$SNI") warning+=("") handshakebytes+=("16030300c9010000c5030354c2762b36f52478eb8189a72c56a69e9a240c099666287c66aef0f4c2ccb99b000030c028c027c014c013009f009e009d009c003d003c0035002fc02cc02bc024c023c00ac009006a004000380032000a00130100006cff0100010000000014001200000f6465762e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100000d001400120401050106010201040305030603020302020023000000100012001006737064792f3308687474702f312e3133740000") -protos+=("-no_ssl2 -no_ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1") lowest_protocol+=("0x0301") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -1396,8 +1319,7 @@ ciphers+=("AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:ECDHE-RSA-AES128-SHA:ECDHE sni+=("$SNI") warning+=("") handshakebytes+=("160301007f0100007b0301536487d458b1a364f27085798ca9e06353f0b300baeecd775e6ccc90a97037c2000018002f00350005000ac013c014c009c00a00320038001300040100003aff0100010000000014001200000f7777772e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b0002010000230000") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("HTTP,FTP") @@ -1414,8 +1336,7 @@ ciphers+=("AES128-SHA256:AES128-SHA:AES256-SHA256:AES256-SHA:DES-CBC3-SHA:ECDHE- sni+=("$SNI") warning+=("") handshakebytes+=("16030300bb010000b703035363d297ad92a8fe276a4e5b9395d593e96fff9c3df0987e5dfbab544ce05832000026003c002f003d0035000ac027c013c014c02bc023c02cc024c009c00a00400032006a0038001301000068ff0100010000000014001200000f7777772e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100000d0010000e04010501020104030503020302020023000000100012001006737064792f3308687474702f312e3133740000") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -1432,8 +1353,7 @@ ciphers+=("ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA: sni+=("$SNI") warning+=("") handshakebytes+=("16030300c5010000c103035537a79a55362d42c3b3308fea91e85c5656021153d0a4baf03e7fef6e315c72000030c028c027c014c013009f009e009d009c003d003c0035002fc02cc02bc024c023c00ac009006a004000380032000a001301000068ff0100010000000014001200000f6465762e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100000d0010000e04010501020104030503020302020023000000100012001006737064792f3308687474702f312e3133740000") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -1450,8 +1370,7 @@ ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES sni+=("$SNI") warning+=("") handshakebytes+=("16030300c9010000c50303558923f4d57c2d79aba0360f4030073f0554d057176bd610fb2aa74ee4407361000034c030c02fc028c027c014c013009f009e009d009c003d003c0035002fc02cc02bc024c023c00ac009006a004000380032000a00130100006800000014001200000f6465762e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100000d00140012040105010201040305030203020206010603002300000010000e000c02683208687474702f312e3100170000ff01000100") -protos+=("-no_ssl2 -no_ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1") lowest_protocol+=("0x0301") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -1468,8 +1387,7 @@ ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES sni+=("$SNI") warning+=("") handshakebytes+=("16030300c9010000c50303558923f4d57c2d79aba0360f4030073f0554d057176bd610fb2aa74ee4407361000034c030c02fc028c027c014c013009f009e009d009c003d003c0035002fc02cc02bc024c023c00ac009006a004000380032000a00130100006800000014001200000f6465762e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100000d00140012040105010201040305030203020206010603002300000010000e000c02683208687474702f312e3100170000ff01000100") -protos+=("-no_ssl2 -no_ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1") lowest_protocol+=("0x0301") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -1486,8 +1404,7 @@ ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA sni+=("$SNI") warning+=("") handshakebytes+=("16030300d3010000cf0303565ee009f8e3f685347567b3edfd626034a1125966e4d818ec6f57a022d2fc9e000034c02cc02bc030c02f009f009ec024c023c028c027c00ac009c014c013009d009c003d003c0035002f000a006a00400038003200130100007200000014001200000f6465762e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100000d00140012040105010201040305030203020206010603002300000010000e000c02683208687474702f312e310017000055000006000100020002ff01000100") -protos+=("-no_ssl2 -no_ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1") lowest_protocol+=("0x0301") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -1504,8 +1421,7 @@ ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA sni+=("$SNI") warning+=("") handshakebytes+=("16030300d3010000cf0303565ee836e62e7b9b734f4dca5f3f1ad62dc4e5f87bdf6c90f325b6a2e0012705000034c02cc02bc030c02f009f009ec024c023c028c027c00ac009c014c013009d009c003d003c0035002f000a006a00400038003200130100007200000014001200000f6465762e73736c6c6162732e636f6d000500050100000000000a0006000400170018000b00020100000d00140012040105010201040305030203020206010603002300000010000e000c02683208687474702f312e310017000055000006000100020002ff01000100") -protos+=("-no_ssl2 -no_ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1") lowest_protocol+=("0x0301") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -1522,8 +1438,7 @@ ciphers+=("RC4-MD5:RC4-MD5:RC4-SHA:AES128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128- sni+=("") warning+=("") handshakebytes+=("8065010301003c0000002000000401008000000500002f00003300003200000a0700c00000160000130000090600400000150000120000030200800000080000140000110000ff52173357f48ce6722f974dbb429b9279208d1cf5b9088947c9ba16d9ecbc0fa6") -protos+=("-ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3 -ssl2") lowest_protocol+=("0x0200") highest_protocol+=("0x0301") service+=("ANY") @@ -1540,8 +1455,7 @@ ciphers+=("ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:AES128-SHA:ECDH-ECDSA-AES sni+=("$SNI") warning+=("") handshakebytes+=("16030100ad010000a9030152178334e8b855253e50e4623e475b6941c18cc312de6395a98e1cd4fd6735e700002ac009c013002fc004c00e00330032c007c0110005c002c00cc008c012000ac003c00d00160013000400ff01000056000a0034003200170001000300130015000600070009000a0018000b000c0019000d000e000f001000110002001200040005001400080016000b0002010000000014001200000f7777772e73736c6c6162732e636f6d") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("ANY") @@ -1558,8 +1472,7 @@ ciphers+=("ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:AES128-SHA256:ECDH- sni+=("$SNI") warning+=("") handshakebytes+=("16030300e7010000e303035319a4a6c3909b598b7f5c0923999b7fa67cf6e79f73a016ea39a221c6989eeb000046c023c027003cc025c02900670040c009c013002fc004c00e00330032c007c0110005c002c00cc02bc02f009cc02dc031009e00a2c008c012000ac003c00d00160013000400ff01000074000a0034003200170001000300130015000600070009000a0018000b000c0019000d000e000f001000110002001200040005001400080016000b00020100000d001a001806030601050305010403040103030301020302010202010100000014001200000f7777772e73736c6c6162732e636f6d") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("ANY") @@ -1576,8 +1489,7 @@ ciphers+=("ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:AES128-SHA256:ECDH- sni+=("$SNI") warning+=("") handshakebytes+=("16030300e7010000e3030354c21168512b37f2a7410028c16673626ff931146918c7b29f78150b7339e5af000046c023c027003cc025c02900670040c009c013002fc004c00e00330032c02bc02f009cc02dc031009e00a2c008c012000ac003c00d00160013c007c0110005c002c00c000400ff01000074000a0034003200170001000300130015000600070009000a0018000b000c0019000d000e000f001000110002001200040005001400080016000b00020100000d001a001806030601050305010403040103030301020302010202010100000014001200000f6465762e73736c6c6162732e636f6d") -protos+=("-no_ssl2 -no_ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1") lowest_protocol+=("0x0301") highest_protocol+=("0x0303") service+=("ANY") @@ -1594,8 +1506,7 @@ ciphers+=("DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256-SHA:EDH-RSA-DES-CBC3-SHA sni+=("$SNI") warning+=("") handshakebytes+=("16030100730100006f0301521782e707c1a780d3124742f35573dbb693babe5d3a7e9405c706af18b636bf00002a00390038003500160013000a00330032002f0007000500040015001200090014001100080006000300ff0100001c00000014001200000f7777772e73736c6c6162732e636f6d00230000") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("ANY") @@ -1612,8 +1523,7 @@ ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-A sni+=("$SNI") warning+=("") handshakebytes+=("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") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("ANY") @@ -1630,8 +1540,7 @@ ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-A sni+=("$SNI") warning+=("") handshakebytes+=("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") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("ANY") @@ -1648,8 +1557,7 @@ ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-A sni+=("$SNI") warning+=("") handshakebytes+=("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") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("ANY") @@ -1666,8 +1574,7 @@ ciphers+=("DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA256:DH-RSA-AES256-SHA256:DH-D sni+=("$SNI") warning+=("") handshakebytes+=("160301008d01000089030151d15a838169aa7a0158e2e9dd53397bec509ab4135d83fc3e8457b4322332e3000036006b006a00690068003d0039003800370036003500670040003f003e003c0033003200310030002f000500040013000d00160010000a0100002a00000014001200000f7777772e73736c6c6162732e636f6dff0100010000050005010000000033740000") -protos+=("-no_ssl2 -no_ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1") lowest_protocol+=("0x0301") highest_protocol+=("0x0301") service+=("HTTP,FTP") @@ -1684,8 +1591,7 @@ ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:D sni+=("$SNI") warning+=("") handshakebytes+=("16030100b9010000b5030251fa313df3fb4ade87369b14f89da7776406dc1cfd7bbf08fff0bbb0ef2f5da4000048c00ac0140088008700390038c00fc00500840035c007c009c011c01300450044006600330032c00cc00ec002c0040096004100050004002fc008c01200160013c00dc003feff000a0100004400000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000754f0000000500050100000000") -protos+=("-no_ssl2 -ssl3 -no_tls1_2") -tlsvers+=("-tls1_1 -tls1") +protos+=("-tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0302") service+=("HTTP,FTP") @@ -1702,8 +1608,7 @@ ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:DHE-RS sni+=("$SNI") warning+=("") handshakebytes+=("1603010099010000950302524d41d17646ea784e8625eb64a4f5f4c94ad345ad0b4d9d8da570b2db45db64000028c00ac0140039006b0035003dc007c009c023c011c013c02700330067003200050004002f003c000a0100004400000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b000201000023000033740000754f0000000500050100000000") -protos+=("-no_ssl2 -ssl3 -no_tls1_2") -tlsvers+=("-tls1_1 -tls1") +protos+=("-tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0302") service+=("HTTP,FTP") @@ -1720,8 +1625,7 @@ ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:DHE-RS sni+=("$SNI") warning+=("") handshakebytes+=("16030100d5010000d10303526793c01b8d4859d838c8658f07f895a2f35ba16fb786644db811b856197e9b000028c00ac0140039006b0035003dc007c009c023c011c013c02700330067003200050004002f003c000a0100008000000014001200000f7777772e73736c6c6162732e636f6dff01000100000a00080006001700180019000b00020100002300003374000000100022002006737064792f3206737064792f3308737064792f332e3108687474702f312e31754f0000000500050100000000000d0012001004010501020104030503020304020202") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -1738,8 +1642,7 @@ ciphers+=("ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES25 sni+=("$SNI") warning+=("") handshakebytes+=("16030300b1010000ad030351d15d7aa4e0bca9cfe5971857ba54d3c9c1f96ecbb8aae4d4cd94e7dbbefef800004a00ffc024c023c00ac009c007c008c028c027c014c013c011c012c026c025c02ac029c004c005c002c003c00ec00fc00cc00d003d003c002f000500040035000a0067006b0033003900160100003a00000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d000c000a05010401020104030203") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -1756,8 +1659,7 @@ ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-RC4-SHA:ECD sni+=("$SNI") warning+=("") handshakebytes+=("160301009d01000099030151d15dc2887b1852fd4291e36c3f4e8a35266e15dd6354779fbf5438b59b42da000046c00ac009c007c008c013c014c011c012c004c005c002c003c00ec00fc00cc00d002f000500040035000a000900030008000600320033003800390016001500140013001200110100002a00000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b00020100") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("HTTP,FTP") @@ -1774,8 +1676,7 @@ ciphers+=("ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES25 sni+=("$SNI") warning+=("") handshakebytes+=("16030300bf010000bb030351d15ce21834380a8b5f491a00790b6d097014bb1e04124706631c6a6a3f973800005800ffc024c023c00ac009c007c008c028c027c014c013c011c012c026c025c02ac029c004c005c002c003c00ec00fc00cc00d003d003c002f000500040035000a0067006b003300390016c006c010c001c00b003b000200010100003a00000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d000c000a05010401020104030203") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -1792,8 +1693,7 @@ ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-ECDSA-RC4-SHA:ECD sni+=("$SNI") warning+=("") handshakebytes+=("16030100a9010000a5030151fa327c6576dadde1e8a89d4d45bdc1d0c107b8cbe998337e02ca419a0bcb30204dd1c85d9fbc1607b27a35ec9dfd1dae2c589483843a73999c9de205748633b1003200ffc00ac009c007c008c014c013c011c012c004c005c002c003c00ec00fc00cc00d002f000500040035000a0033003900160100002a00000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b00020100") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("HTTP,FTP") @@ -1810,8 +1710,7 @@ ciphers+=("ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES25 sni+=("$SNI") warning+=("") handshakebytes+=("16030100b1010000ad0303532017204048bb5331c62bf295ab4c2f2b3964f515c649a7d0947c8102d7348600004a00ffc024c023c00ac009c007c008c028c027c014c013c011c012c026c025c02ac029c005c004c002c003c00fc00ec00cc00d003d003c002f000500040035000a0067006b0033003900160100003a00000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d000c000a05010401020104030203") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -1828,8 +1727,7 @@ ciphers+=("ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES25 sni+=("$SNI") warning+=("") handshakebytes+=("16030100b5010000b1030353ad95f2031490cfd60dbda382e916685b09dec1ab8ac0a4b0c9f39e048855ce00004a00ffc024c023c00ac009c008c028c027c014c013c012c026c025c005c004c003c02ac029c00fc00ec00d006b0067003900330016003d003c0035002f000ac007c011c002c00c000500040100003e00000014001200000f6465762e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d000c000a0501040102010403020333740000") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -1846,8 +1744,7 @@ ciphers+=("ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES25 sni+=("$SNI") warning+=("") handshakebytes+=("16030100d1010000cd030351fa3664edce86d82606540539ccd388418b1a5cb8cfda5e15349c635d4b028b203bf83c63e3da6777e407300b5d657e429f11cd7d857977e4390fda365b8d4664004a00ffc024c023c00ac009c007c008c028c027c014c013c011c012c026c025c02ac029c005c004c002c003c00fc00ec00cc00d003d003c002f000500040035000a0067006b0033003900160100003a00000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d000c000a05010401020104030203") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -1864,8 +1761,7 @@ ciphers+=("ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES25 sni+=("$SNI") warning+=("") handshakebytes+=("16030100b5010000b1030354c20f1647345d0cac1db29f0489aab5e2016e6b2baca65e8c5eb6dd48a1fcd400004a00ffc024c023c00ac009c008c028c027c014c013c012c026c025c005c004c003c02ac029c00fc00ec00d006b0067003900330016003d003c0035002f000ac007c011c002c00c000500040100003e00000014001200000f6465762e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d000c000a0501040102010403020333740000") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -1882,8 +1778,7 @@ ciphers+=("ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES25 sni+=("$SNI") warning+=("") handshakebytes+=("16030100b5010000b1030354c20a44e0d7681f3d55d7e9a764b67e6ffa6722c17b21e15bc2c9c98892460a00004a00ffc024c023c00ac009c008c028c027c014c013c012c026c025c005c004c003c02ac029c00fc00ec00d006b0067003900330016003d003c0035002f000ac007c011c002c00c000500040100003e00000014001200000f6465762e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d000c000a0501040102010403020333740000") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -1900,8 +1795,7 @@ ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECD sni+=("$SNI") warning+=("") handshakebytes+=("16030100e2010000de030355fb38fdc94c6c1ff6ee066f0e69579f40a83ce5454787e8834b60fd8c31e5ac00003400ffc02cc02bc024c023c00ac009c008c030c02fc028c027c014c013c012009d009c003d003c0035002f000ac007c011000500040100008100000014001200000f6465762e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d000e000c0501040102010503040302033374000000100030002e0268320568322d31360568322d31350568322d313408737064792f332e3106737064792f3308687474702f312e3100050005010000000000120000") -protos+=("-no_ssl2 -no_ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1") lowest_protocol+=("0x0301") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -1918,8 +1812,7 @@ ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECD sni+=("$SNI") warning+=("") handshakebytes+=("16030100e2010000de030355def1c4d1f6a12227389012da236581104b0bfa8b8a5bc849372531349dccc600003400ffc02cc02bc024c023c00ac009c008c030c02fc028c027c014c013c012009d009c003d003c0035002f000ac007c011000500040100008100000014001200000f6465762e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d000e000c0501040102010503040302033374000000100030002e0268320568322d31360568322d31350568322d313408737064792f332e3106737064792f3308687474702f312e3100050005010000000000120000") -protos+=("-no_ssl2 -no_ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1") lowest_protocol+=("0x0301") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -1936,8 +1829,7 @@ ciphers+=("ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECD sni+=("$SNI") warning+=("") handshakebytes+=("16030300c6010000c2030355def146b7ed606006d8d54a3ece6c9c1b5070b51ce0e81d354178f0311d2e0100001800ffc02cc02bc024c00ac023c009c030c02fc028c027c0130100008100000014001200000f6465762e73736c6c6162732e636f6d000a00080006001700180019000b00020100000d000e000c0501040102010503040302033374000000100030002e0268320568322d31360568322d31350568322d313408737064792f332e3106737064792f3308687474702f312e3100050005010000000000120000") -protos+=("-no_ssl2 -no_ssl3 -no_tls1 -no_tls1_1") -tlsvers+=("-tls1_2") +protos+=("-tls1_2") lowest_protocol+=("0x0303") highest_protocol+=("0x0303") service+=("HTTP") @@ -1954,8 +1846,7 @@ ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:D sni+=("$SNI") warning+=("") handshakebytes+=("16030100a30100009f0301526795b7dd72263ca4170729d52799a927b2e8ec0e2d844bca2cd7061de7a57d00004800ffc00ac0140088008700390038c00fc00500840035c007c009c011c0130045004400330032c00cc00ec002c0040096004100050004002fc008c01200160013c00dc003feff000a0100002e00000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b0002010033740000") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("HTTP,FTP") @@ -1972,8 +1863,7 @@ ciphers+=("ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-CAMELLIA256-SHA:D sni+=("$SNI") warning+=("") handshakebytes+=("16030100a30100009f0301525f6c38ddc9634ed772519ee023cd48ea60cf5f3a79fff5fd41491a39344c8900004800ffc00ac0140088008700390038c00fc00500840035c007c009c011c0130045004400330032c00cc00ec002c0040096004100040005002fc008c01200160013c00dc003feff000a0100002e00000014001200000f7777772e73736c6c6162732e636f6d000a00080006001700180019000b0002010000230000") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("HTTP,FTP") @@ -1990,8 +1880,7 @@ ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-A sni+=("") warning+=("") handshakebytes+=("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") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -2008,8 +1897,7 @@ ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-A sni+=("$SNI") warning+=("") handshakebytes+=("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") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -2026,8 +1914,7 @@ ciphers+=("DES-CBC3-SHA:RC4-SHA:RC4-MD5") sni+=("") warning+=("") handshakebytes+=("16030000310100002d030052e5747f771870662109bfd989a73aa284331afbc8ae51ba5d2e64a108cf71c7000006000a000500040100") -protos+=("-no_ssl2 -ssl3 -no_tls1 -no_tls1_1 -no_tls1_2") -tlsvers+=("") +protos+=("-ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0300") service+=("HTTP,FTP") @@ -2044,8 +1931,7 @@ ciphers+=("DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256-SHA:EDH-RSA-DES-CBC3-SHA sni+=("$SNI") warning+=("") handshakebytes+=("16030100760100007203015379d6fc38f530a5f78d3ec23de856d27305a4cebcc6d8f1b1ad40c8901fafa400002a00390038003500160013000a00330032002f0007000500040015001200090014001100080006000300ff0100001f0000001700150000127777772e6665697374796475636b2e636f6d00230000") -protos+=("-no_ssl2 -ssl3 -no_tls1_1 -no_tls1_2") -tlsvers+=("-tls1") +protos+=("-tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("HTTP,FTP") @@ -2062,8 +1948,7 @@ ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-A sni+=("$SNI") warning+=("") handshakebytes+=("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") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -2080,8 +1965,7 @@ ciphers+=("ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-A sni+=("$SNI") warning+=("") handshakebytes+=("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") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1_2 -tls1_1 -tls1") +protos+=("-tls1_2 -tls1_1 -tls1 -ssl3") lowest_protocol+=("0x0300") highest_protocol+=("0x0303") service+=("HTTP,FTP") @@ -2100,8 +1984,7 @@ ciphers+=("ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES25 sni+=("$SNI") warning+=("") handshakebytes+=("16030100bb010000b703015767e6ae46f9abf3138e26a9f9880f9697bf3387f7eff709db1fa220e692d80420fb04b0979bae1664e11ef172d4dfba15af59dd200b7831992a35c73cde9efed9003200ffc024c023c00ac009c008c028c027c014c013c012006b0067003900330016003d003c0035002f000ac007c011000500040100003c000000190017000014696d61702e73656374696f6e7a65726f2e6f7267000a00080006001700180019000b0002010000050005010000000000120000") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1") +protos+=("-tls1_1 -tls1") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("SMTP,POP,IMAP") @@ -2118,8 +2001,7 @@ ciphers+=("ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES25 sni+=("$SNI") warning+=("") handshakebytes+=("16030100940100009003015770e928499e82df2eb7477200e2a828d9fa4109514385bd1602df44aaf2b0f400003200ffc024c023c00ac009c008c028c027c014c013c012006b0067003900330016003d003c0035002f000ac007c011000500040100003500000012001000000d3137382e3233372e33342e3932000a00080006001700180019000b0002010000050005010000000000120000") -protos+=("-no_ssl2 -no_ssl3") -tlsvers+=("-tls1") +protos+=("-tls1") lowest_protocol+=("0x0301") highest_protocol+=("0x0301") service+=("SMTP,POP,IMAP") @@ -2129,3 +2011,20 @@ minRsaBits+=(-1) maxRsaBits+=(-1) minEcdsaBits+=(-1) requiresSha2+=(false) + +names+=("Thunderbird 45.1.1 OSX 10.11 ") +short+=("thudnerbird_45.1.1_osx_101115") +ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA") +sni+=("$SNI") +warning+=("") +handshakebytes+=("160301009d010000990303c7c5b3ff80b3aa597c770c538b98ae34a94c9590ad8f947ba7bc28692061cb57000016c02bc02fc00ac009c013c01400330039002f0035000a0100005a0000001800160000136d78332e73656374696f6e7a65726f2e6f7267ff01000100000a00080006001700180019000b0002010000230000000500050100000000000d001600140401050106010201040305030603020304020202") +protos+=("-tls1_2 -tls1_1 -tls1") +lowest_protocol+=("0x0301") +highest_protocol+=("0x0303") +service+=("SMTP,POP,IMAP") +minDhBits+=(-1) +maxDhBits+=(-1) +minRsaBits+=(-1) +maxRsaBits+=(-1) +minEcdsaBits+=(-1) +requiresSha2+=(false) diff --git a/testssl.sh b/testssl.sh index 3440a74..2620522 100755 --- a/testssl.sh +++ b/testssl.sh @@ -160,7 +160,6 @@ SERVER_SIZE_LIMIT_BUG=false # Some servers have either a ClientHello # tuning vars, can not be set by a cmd line switch EXPERIMENTAL=${EXPERIMENTAL:-false} -#EXPERIMENTAL=true HEADER_MAXSLEEP=${HEADER_MAXSLEEP:-5} # we wait this long before killing the process to retrieve a service banner / http header readonly MAX_WAITSOCK=10 # waiting at max 10 seconds for socket reply readonly CCS_MAX_WAITSOCK=5 # for the two CCS payload (each) @@ -2052,10 +2051,13 @@ run_client_simulation() { [[ $sclient_success -eq 0 ]] && cp "$TEMPDIR/$NODEIP.parse_tls_serverhello.txt" $TMPFILE >$ERRFILE fi else - $OPENSSL s_client -cipher ${ciphers[i]} ${protos[i]} ${tlsvers[i]} $STARTTLS $BUGS $PROXY -connect $NODEIP:$PORT ${sni[i]} $TMPFILE 2>$ERRFILE - debugme echo "$OPENSSL s_client -cipher ${ciphers[i]} ${protos[i]} ${tlsvers[i]} $STARTTLS $BUGS $PROXY -connect $NODEIP:$PORT ${sni[i]} $TMPFILE 2>$ERRFILE + debugme echo "$OPENSSL s_client -cipher ${ciphers[i]} $pflag $STARTTLS $BUGS $PROXY -connect $NODEIP:$PORT ${sni[i]} $TMPFILE 2>$ERRFILE - debugme echo "$OPENSSL s_client $tls -no_ssl2 -no_ssl3 -cipher ${ciphers[i]} $STARTTLS $BUGS $PROXY -connect $NODEIP:$PORT ${sni[i]} {lowestProtocol} <= 768 && $client->{highestProtocol} >= 768 ) { # 768 = 0x300 = sslv3 push @proto_flags, "-ssl3"; - } else { - push @proto_flags, "-no_ssl3" } # Do we need to support TLS 1.0? if ( $client->{lowestProtocol} <= 769 && $client->{highestProtocol} >= 769 ) { # 769 = 0x301 = tls1.0 - push @tls_flags, "-tls1"; - } else { - push @proto_flags, "-no_tls1" + push @proto_flags, "-tls1"; } # Do we need to support TLS 1.1? if ( $client->{lowestProtocol} <= 770 && $client->{highestProtocol} >= 770 ) { # 770 = 0x302 = tls1.1 - push @tls_flags, "-tls1_1"; - } else { - push @proto_flags, "-no_tls1_1" + push @proto_flags, "-tls1_1"; } # Do we need to support TLS 1.2? if ( $client->{lowestProtocol} <= 771 && $client->{highestProtocol} >= 771 ) { # 771 = 0x303 = tls1.2 - push @tls_flags, "-tls1_2"; - } else { - push @proto_flags, "-no_tls1_2" + push @proto_flags, "-tls1_2"; } - print OUT "protos+=(\"" . (join " ", @proto_flags) . "\")\n"; - print OUT "tlsvers+=(\"" . (join " ", reverse @tls_flags) . "\")\n"; + print OUT "protos+=(\"" . (join " ", reverse @proto_flags) . "\")\n"; printf OUT "lowest_protocol+=(\"0x%04x\")\n", $client->{lowestProtocol}; printf OUT "highest_protocol+=(\"0x%04x\")\n", $client->{highestProtocol}; @@ -154,8 +143,7 @@ ciphers+=("ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES25 sni+=("$SNI") warning+=("") handshakebytes+=("16030100bb010000b703015767e6ae46f9abf3138e26a9f9880f9697bf3387f7eff709db1fa220e692d80420fb04b0979bae1664e11ef172d4dfba15af59dd200b7831992a35c73cde9efed9003200ffc024c023c00ac009c008c028c027c014c013c012006b0067003900330016003d003c0035002f000ac007c011000500040100003c000000190017000014696d61702e73656374696f6e7a65726f2e6f7267000a00080006001700180019000b0002010000050005010000000000120000") -protos+=("-no_ssl2 -ssl3") -tlsvers+=("-tls1") +protos+=("-tls1_1 -tls1") lowest_protocol+=("0x0300") highest_protocol+=("0x0301") service+=("SMTP,POP,IMAP") @@ -172,8 +160,7 @@ ciphers+=("ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-AES25 sni+=("$SNI") warning+=("") handshakebytes+=("16030100940100009003015770e928499e82df2eb7477200e2a828d9fa4109514385bd1602df44aaf2b0f400003200ffc024c023c00ac009c008c028c027c014c013c012006b0067003900330016003d003c0035002f000ac007c011000500040100003500000012001000000d3137382e3233372e33342e3932000a00080006001700180019000b0002010000050005010000000000120000") -protos+=("-no_ssl2 -no_ssl3") -tlsvers+=("-tls1") +protos+=("-tls1") lowest_protocol+=("0x0301") highest_protocol+=("0x0301") service+=("SMTP,POP,IMAP") @@ -183,6 +170,23 @@ minRsaBits+=(-1) maxRsaBits+=(-1) minEcdsaBits+=(-1) requiresSha2+=(false) + +names+=("Thunderbird 45.1.1 OSX 10.11 ") +short+=("thudnerbird_45.1.1_osx_101115") +ciphers+=("ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA") +sni+=("$SNI") +warning+=("") +handshakebytes+=("160301009d010000990303c7c5b3ff80b3aa597c770c538b98ae34a94c9590ad8f947ba7bc28692061cb57000016c02bc02fc00ac009c013c01400330039002f0035000a0100005a0000001800160000136d78332e73656374696f6e7a65726f2e6f7267ff01000100000a00080006001700180019000b0002010000230000000500050100000000000d001600140401050106010201040305030603020304020202") +protos+=("-tls1_2 -tls1_1 -tls1") +lowest_protocol+=("0x0301") +highest_protocol+=("0x0303") +service+=("SMTP,POP,IMAP") +minDhBits+=(-1) +maxDhBits+=(-1) +minRsaBits+=(-1) +maxRsaBits+=(-1) +minEcdsaBits+=(-1) +requiresSha2+=(false) '; exit;