Question about QSslCipher::protocolString

Dawit A adawit at kde.org
Tue Oct 21 20:24:33 BST 2014


I think this whole problem came about as a result of a misunderstanding?
More specifically a misreading of what the protocol information in the
cipher itself was meant to convey. The OpenSSL documentation for
SSL_CIPHER_get_version,
http://www.openssl.org/docs/ssl/SSL_CIPHER_get_name.html, states the
following:

"returns string which indicates the SSL/TLS protocol version that first
defined the cipher. This is currently *SSLv2* or *TLSv1/SSLv3*. In some
cases it should possibly return ``TLSv1.2'' but does not; use
SSL_CIPHER_description() instead. If *cipher* is NULL, ``(NONE)'' is
returned."

So the protocol string in the cipher is merely a historical information as
to when that cipher was first defined and not meant to convey the current
connection's protocol! What this means for the example case of
blog.mozilla.org is that a valid TLSv1.1 connection was established using a
cipher that was first defined under SSL/TLS protocol SSLv3.


2014-10-21 10:35 GMT-04:00 Thomas Lübking <thomas.luebking at gmail.com>:

> On Montag, 20. Oktober 2014 01:13:35 CEST, Thiago Macieira wrote:
>
>> On Sunday 19 October 2014 18:14:36 Thomas Lübking wrote:
>>
>>> On Sonntag, 19. Oktober 2014 16:35:35 CEST, Dawit A wrote: ...
>>>
>>
>> This is looking like a Qt bug instead. Can you investigate QSslSocket
>> instead?
>>
>
> This is the list of ciphers as reported by q_SSL_get_ciphers(), there's no
> "invalid" nor a NULL cipher.
> Second line is the split list.
> There's no "TLSv1.1" among them, nor anything that remotely looks like one.
>
>
> Cheers,
> Thomas
>
> ----------
>
> "ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH     Au=RSA  Enc=AESGCM(256)
> Mac=AEAD
> "("ECDHE-RSA-AES256-GCM-SHA384", "TLSv1.2", "Kx=ECDH", "Au=RSA",
> "Enc=AESGCM(256)", "Mac=AEAD")
>
> "ECDHE-ECDSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH     Au=ECDSA
> Enc=AESGCM(256) Mac=AEAD
> "("ECDHE-ECDSA-AES256-GCM-SHA384", "TLSv1.2", "Kx=ECDH", "Au=ECDSA",
> "Enc=AESGCM(256)", "Mac=AEAD")
>
> "ECDHE-RSA-AES256-SHA384 TLSv1.2 Kx=ECDH     Au=RSA  Enc=AES(256)
> Mac=SHA384
> "("ECDHE-RSA-AES256-SHA384", "TLSv1.2", "Kx=ECDH", "Au=RSA",
> "Enc=AES(256)", "Mac=SHA384")
>
> "ECDHE-ECDSA-AES256-SHA384 TLSv1.2 Kx=ECDH     Au=ECDSA Enc=AES(256)
> Mac=SHA384
> "("ECDHE-ECDSA-AES256-SHA384", "TLSv1.2", "Kx=ECDH", "Au=ECDSA",
> "Enc=AES(256)", "Mac=SHA384")
>
> "ECDHE-RSA-AES256-SHA    SSLv3 Kx=ECDH     Au=RSA  Enc=AES(256)  Mac=SHA1
> "("ECDHE-RSA-AES256-SHA", "SSLv3", "Kx=ECDH", "Au=RSA", "Enc=AES(256)",
> "Mac=SHA1")
>
> "ECDHE-ECDSA-AES256-SHA  SSLv3 Kx=ECDH     Au=ECDSA Enc=AES(256)  Mac=SHA1
> "("ECDHE-ECDSA-AES256-SHA", "SSLv3", "Kx=ECDH", "Au=ECDSA",
> "Enc=AES(256)", "Mac=SHA1")
>
> "SRP-DSS-AES-256-CBC-SHA SSLv3 Kx=SRP      Au=DSS  Enc=AES(256)  Mac=SHA1
> "("SRP-DSS-AES-256-CBC-SHA", "SSLv3", "Kx=SRP", "Au=DSS", "Enc=AES(256)",
> "Mac=SHA1")
>
> "SRP-RSA-AES-256-CBC-SHA SSLv3 Kx=SRP      Au=RSA  Enc=AES(256)  Mac=SHA1
> "("SRP-RSA-AES-256-CBC-SHA", "SSLv3", "Kx=SRP", "Au=RSA", "Enc=AES(256)",
> "Mac=SHA1")
>
> "SRP-AES-256-CBC-SHA     SSLv3 Kx=SRP      Au=SRP  Enc=AES(256)  Mac=SHA1
> "("SRP-AES-256-CBC-SHA", "SSLv3", "Kx=SRP", "Au=SRP", "Enc=AES(256)",
> "Mac=SHA1")
>
> "DHE-DSS-AES256-GCM-SHA384 TLSv1.2 Kx=DH       Au=DSS  Enc=AESGCM(256)
> Mac=AEAD
> "("DHE-DSS-AES256-GCM-SHA384", "TLSv1.2", "Kx=DH", "Au=DSS",
> "Enc=AESGCM(256)", "Mac=AEAD")
>
> "DHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=DH       Au=RSA  Enc=AESGCM(256)
> Mac=AEAD
> "("DHE-RSA-AES256-GCM-SHA384", "TLSv1.2", "Kx=DH", "Au=RSA",
> "Enc=AESGCM(256)", "Mac=AEAD")
>
> "DHE-RSA-AES256-SHA256   TLSv1.2 Kx=DH       Au=RSA  Enc=AES(256)
> Mac=SHA256
> "("DHE-RSA-AES256-SHA256", "TLSv1.2", "Kx=DH", "Au=RSA", "Enc=AES(256)",
> "Mac=SHA256")
>
> "DHE-DSS-AES256-SHA256   TLSv1.2 Kx=DH       Au=DSS  Enc=AES(256)
> Mac=SHA256
> "("DHE-DSS-AES256-SHA256", "TLSv1.2", "Kx=DH", "Au=DSS", "Enc=AES(256)",
> "Mac=SHA256")
>
> "DHE-RSA-AES256-SHA      SSLv3 Kx=DH       Au=RSA  Enc=AES(256)  Mac=SHA1
> "("DHE-RSA-AES256-SHA", "SSLv3", "Kx=DH", "Au=RSA", "Enc=AES(256)",
> "Mac=SHA1")
>
> "DHE-DSS-AES256-SHA      SSLv3 Kx=DH       Au=DSS  Enc=AES(256)  Mac=SHA1
> "("DHE-DSS-AES256-SHA", "SSLv3", "Kx=DH", "Au=DSS", "Enc=AES(256)",
> "Mac=SHA1")
>
> "DHE-RSA-CAMELLIA256-SHA SSLv3 Kx=DH       Au=RSA  Enc=Camellia(256)
> Mac=SHA1
> "("DHE-RSA-CAMELLIA256-SHA", "SSLv3", "Kx=DH", "Au=RSA",
> "Enc=Camellia(256)", "Mac=SHA1")
>
> "DHE-DSS-CAMELLIA256-SHA SSLv3 Kx=DH       Au=DSS  Enc=Camellia(256)
> Mac=SHA1
> "("DHE-DSS-CAMELLIA256-SHA", "SSLv3", "Kx=DH", "Au=DSS",
> "Enc=Camellia(256)", "Mac=SHA1")
>
> "ECDH-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH/RSA Au=ECDH Enc=AESGCM(256)
> Mac=AEAD
> "("ECDH-RSA-AES256-GCM-SHA384", "TLSv1.2", "Kx=ECDH/RSA", "Au=ECDH",
> "Enc=AESGCM(256)", "Mac=AEAD")
>
> "ECDH-ECDSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH/ECDSA Au=ECDH
> Enc=AESGCM(256) Mac=AEAD
> "("ECDH-ECDSA-AES256-GCM-SHA384", "TLSv1.2", "Kx=ECDH/ECDSA", "Au=ECDH",
> "Enc=AESGCM(256)", "Mac=AEAD")
>
> "ECDH-RSA-AES256-SHA384  TLSv1.2 Kx=ECDH/RSA Au=ECDH Enc=AES(256)
> Mac=SHA384
> "("ECDH-RSA-AES256-SHA384", "TLSv1.2", "Kx=ECDH/RSA", "Au=ECDH",
> "Enc=AES(256)", "Mac=SHA384")
>
> "ECDH-ECDSA-AES256-SHA384 TLSv1.2 Kx=ECDH/ECDSA Au=ECDH Enc=AES(256)
> Mac=SHA384
> "("ECDH-ECDSA-AES256-SHA384", "TLSv1.2", "Kx=ECDH/ECDSA", "Au=ECDH",
> "Enc=AES(256)", "Mac=SHA384")
>
> "ECDH-RSA-AES256-SHA     SSLv3 Kx=ECDH/RSA Au=ECDH Enc=AES(256)  Mac=SHA1
> "("ECDH-RSA-AES256-SHA", "SSLv3", "Kx=ECDH/RSA", "Au=ECDH",
> "Enc=AES(256)", "Mac=SHA1")
>
> "ECDH-ECDSA-AES256-SHA   SSLv3 Kx=ECDH/ECDSA Au=ECDH Enc=AES(256)  Mac=SHA1
> "("ECDH-ECDSA-AES256-SHA", "SSLv3", "Kx=ECDH/ECDSA", "Au=ECDH",
> "Enc=AES(256)", "Mac=SHA1")
>
> "AES256-GCM-SHA384       TLSv1.2 Kx=RSA      Au=RSA  Enc=AESGCM(256)
> Mac=AEAD
> "("AES256-GCM-SHA384", "TLSv1.2", "Kx=RSA", "Au=RSA", "Enc=AESGCM(256)",
> "Mac=AEAD")
>
> "AES256-SHA256           TLSv1.2 Kx=RSA      Au=RSA  Enc=AES(256)
> Mac=SHA256
> "("AES256-SHA256", "TLSv1.2", "Kx=RSA", "Au=RSA", "Enc=AES(256)",
> "Mac=SHA256")
>
> "AES256-SHA              SSLv3 Kx=RSA      Au=RSA  Enc=AES(256)  Mac=SHA1
> "("AES256-SHA", "SSLv3", "Kx=RSA", "Au=RSA", "Enc=AES(256)", "Mac=SHA1")
>
> "CAMELLIA256-SHA         SSLv3 Kx=RSA      Au=RSA  Enc=Camellia(256)
> Mac=SHA1
> "("CAMELLIA256-SHA", "SSLv3", "Kx=RSA", "Au=RSA", "Enc=Camellia(256)",
> "Mac=SHA1")
>
> "PSK-AES256-CBC-SHA      SSLv3 Kx=PSK      Au=PSK  Enc=AES(256)  Mac=SHA1
> "("PSK-AES256-CBC-SHA", "SSLv3", "Kx=PSK", "Au=PSK", "Enc=AES(256)",
> "Mac=SHA1")
>
> "ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 Kx=ECDH     Au=RSA  Enc=AESGCM(128)
> Mac=AEAD
> "("ECDHE-RSA-AES128-GCM-SHA256", "TLSv1.2", "Kx=ECDH", "Au=RSA",
> "Enc=AESGCM(128)", "Mac=AEAD")
>
> "ECDHE-ECDSA-AES128-GCM-SHA256 TLSv1.2 Kx=ECDH     Au=ECDSA
> Enc=AESGCM(128) Mac=AEAD
> "("ECDHE-ECDSA-AES128-GCM-SHA256", "TLSv1.2", "Kx=ECDH", "Au=ECDSA",
> "Enc=AESGCM(128)", "Mac=AEAD")
>
> "ECDHE-RSA-AES128-SHA256 TLSv1.2 Kx=ECDH     Au=RSA  Enc=AES(128)
> Mac=SHA256
> "("ECDHE-RSA-AES128-SHA256", "TLSv1.2", "Kx=ECDH", "Au=RSA",
> "Enc=AES(128)", "Mac=SHA256")
>
> "ECDHE-ECDSA-AES128-SHA256 TLSv1.2 Kx=ECDH     Au=ECDSA Enc=AES(128)
> Mac=SHA256
> "("ECDHE-ECDSA-AES128-SHA256", "TLSv1.2", "Kx=ECDH", "Au=ECDSA",
> "Enc=AES(128)", "Mac=SHA256")
>
> "ECDHE-RSA-AES128-SHA    SSLv3 Kx=ECDH     Au=RSA  Enc=AES(128)  Mac=SHA1
> "("ECDHE-RSA-AES128-SHA", "SSLv3", "Kx=ECDH", "Au=RSA", "Enc=AES(128)",
> "Mac=SHA1")
>
> "ECDHE-ECDSA-AES128-SHA  SSLv3 Kx=ECDH     Au=ECDSA Enc=AES(128)  Mac=SHA1
> "("ECDHE-ECDSA-AES128-SHA", "SSLv3", "Kx=ECDH", "Au=ECDSA",
> "Enc=AES(128)", "Mac=SHA1")
>
> "SRP-DSS-AES-128-CBC-SHA SSLv3 Kx=SRP      Au=DSS  Enc=AES(128)  Mac=SHA1
> "("SRP-DSS-AES-128-CBC-SHA", "SSLv3", "Kx=SRP", "Au=DSS", "Enc=AES(128)",
> "Mac=SHA1")
>
> "SRP-RSA-AES-128-CBC-SHA SSLv3 Kx=SRP      Au=RSA  Enc=AES(128)  Mac=SHA1
> "("SRP-RSA-AES-128-CBC-SHA", "SSLv3", "Kx=SRP", "Au=RSA", "Enc=AES(128)",
> "Mac=SHA1")
>
> "SRP-AES-128-CBC-SHA     SSLv3 Kx=SRP      Au=SRP  Enc=AES(128)  Mac=SHA1
> "("SRP-AES-128-CBC-SHA", "SSLv3", "Kx=SRP", "Au=SRP", "Enc=AES(128)",
> "Mac=SHA1")
>
> "DHE-DSS-AES128-GCM-SHA256 TLSv1.2 Kx=DH       Au=DSS  Enc=AESGCM(128)
> Mac=AEAD
> "("DHE-DSS-AES128-GCM-SHA256", "TLSv1.2", "Kx=DH", "Au=DSS",
> "Enc=AESGCM(128)", "Mac=AEAD")
>
> "DHE-RSA-AES128-GCM-SHA256 TLSv1.2 Kx=DH       Au=RSA  Enc=AESGCM(128)
> Mac=AEAD
> "("DHE-RSA-AES128-GCM-SHA256", "TLSv1.2", "Kx=DH", "Au=RSA",
> "Enc=AESGCM(128)", "Mac=AEAD")
>
> "DHE-RSA-AES128-SHA256   TLSv1.2 Kx=DH       Au=RSA  Enc=AES(128)
> Mac=SHA256
> "("DHE-RSA-AES128-SHA256", "TLSv1.2", "Kx=DH", "Au=RSA", "Enc=AES(128)",
> "Mac=SHA256")
>
> "DHE-DSS-AES128-SHA256   TLSv1.2 Kx=DH       Au=DSS  Enc=AES(128)
> Mac=SHA256
> "("DHE-DSS-AES128-SHA256", "TLSv1.2", "Kx=DH", "Au=DSS", "Enc=AES(128)",
> "Mac=SHA256")
>
> "DHE-RSA-AES128-SHA      SSLv3 Kx=DH       Au=RSA  Enc=AES(128)  Mac=SHA1
> "("DHE-RSA-AES128-SHA", "SSLv3", "Kx=DH", "Au=RSA", "Enc=AES(128)",
> "Mac=SHA1")
>
> "DHE-DSS-AES128-SHA      SSLv3 Kx=DH       Au=DSS  Enc=AES(128)  Mac=SHA1
> "("DHE-DSS-AES128-SHA", "SSLv3", "Kx=DH", "Au=DSS", "Enc=AES(128)",
> "Mac=SHA1")
>
> "DHE-RSA-SEED-SHA        SSLv3 Kx=DH       Au=RSA  Enc=SEED(128) Mac=SHA1
> "("DHE-RSA-SEED-SHA", "SSLv3", "Kx=DH", "Au=RSA", "Enc=SEED(128)",
> "Mac=SHA1")
>
> "DHE-DSS-SEED-SHA        SSLv3 Kx=DH       Au=DSS  Enc=SEED(128) Mac=SHA1
> "("DHE-DSS-SEED-SHA", "SSLv3", "Kx=DH", "Au=DSS", "Enc=SEED(128)",
> "Mac=SHA1")
>
> "DHE-RSA-CAMELLIA128-SHA SSLv3 Kx=DH       Au=RSA  Enc=Camellia(128)
> Mac=SHA1
> "("DHE-RSA-CAMELLIA128-SHA", "SSLv3", "Kx=DH", "Au=RSA",
> "Enc=Camellia(128)", "Mac=SHA1")
>
> "DHE-DSS-CAMELLIA128-SHA SSLv3 Kx=DH       Au=DSS  Enc=Camellia(128)
> Mac=SHA1
> "("DHE-DSS-CAMELLIA128-SHA", "SSLv3", "Kx=DH", "Au=DSS",
> "Enc=Camellia(128)", "Mac=SHA1")
>
> "ECDH-RSA-AES128-GCM-SHA256 TLSv1.2 Kx=ECDH/RSA Au=ECDH Enc=AESGCM(128)
> Mac=AEAD
> "("ECDH-RSA-AES128-GCM-SHA256", "TLSv1.2", "Kx=ECDH/RSA", "Au=ECDH",
> "Enc=AESGCM(128)", "Mac=AEAD")
>
> "ECDH-ECDSA-AES128-GCM-SHA256 TLSv1.2 Kx=ECDH/ECDSA Au=ECDH
> Enc=AESGCM(128) Mac=AEAD
> "("ECDH-ECDSA-AES128-GCM-SHA256", "TLSv1.2", "Kx=ECDH/ECDSA", "Au=ECDH",
> "Enc=AESGCM(128)", "Mac=AEAD")
>
> "ECDH-RSA-AES128-SHA256  TLSv1.2 Kx=ECDH/RSA Au=ECDH Enc=AES(128)
> Mac=SHA256
> "("ECDH-RSA-AES128-SHA256", "TLSv1.2", "Kx=ECDH/RSA", "Au=ECDH",
> "Enc=AES(128)", "Mac=SHA256")
>
> "ECDH-ECDSA-AES128-SHA256 TLSv1.2 Kx=ECDH/ECDSA Au=ECDH Enc=AES(128)
> Mac=SHA256
> "("ECDH-ECDSA-AES128-SHA256", "TLSv1.2", "Kx=ECDH/ECDSA", "Au=ECDH",
> "Enc=AES(128)", "Mac=SHA256")
>
> "ECDH-RSA-AES128-SHA     SSLv3 Kx=ECDH/RSA Au=ECDH Enc=AES(128)  Mac=SHA1
> "("ECDH-RSA-AES128-SHA", "SSLv3", "Kx=ECDH/RSA", "Au=ECDH",
> "Enc=AES(128)", "Mac=SHA1")
>
> "ECDH-ECDSA-AES128-SHA   SSLv3 Kx=ECDH/ECDSA Au=ECDH Enc=AES(128)  Mac=SHA1
> "("ECDH-ECDSA-AES128-SHA", "SSLv3", "Kx=ECDH/ECDSA", "Au=ECDH",
> "Enc=AES(128)", "Mac=SHA1")
>
> "AES128-GCM-SHA256       TLSv1.2 Kx=RSA      Au=RSA  Enc=AESGCM(128)
> Mac=AEAD
> "("AES128-GCM-SHA256", "TLSv1.2", "Kx=RSA", "Au=RSA", "Enc=AESGCM(128)",
> "Mac=AEAD")
>
> "AES128-SHA256           TLSv1.2 Kx=RSA      Au=RSA  Enc=AES(128)
> Mac=SHA256
> "("AES128-SHA256", "TLSv1.2", "Kx=RSA", "Au=RSA", "Enc=AES(128)",
> "Mac=SHA256")
>
> "AES128-SHA              SSLv3 Kx=RSA      Au=RSA  Enc=AES(128)  Mac=SHA1
> "("AES128-SHA", "SSLv3", "Kx=RSA", "Au=RSA", "Enc=AES(128)", "Mac=SHA1")
>
> "SEED-SHA                SSLv3 Kx=RSA      Au=RSA  Enc=SEED(128) Mac=SHA1
> "("SEED-SHA", "SSLv3", "Kx=RSA", "Au=RSA", "Enc=SEED(128)", "Mac=SHA1")
>
> "CAMELLIA128-SHA         SSLv3 Kx=RSA      Au=RSA  Enc=Camellia(128)
> Mac=SHA1
> "("CAMELLIA128-SHA", "SSLv3", "Kx=RSA", "Au=RSA", "Enc=Camellia(128)",
> "Mac=SHA1")
>
> "IDEA-CBC-SHA            SSLv3 Kx=RSA      Au=RSA  Enc=IDEA(128) Mac=SHA1
> "("IDEA-CBC-SHA", "SSLv3", "Kx=RSA", "Au=RSA", "Enc=IDEA(128)", "Mac=SHA1")
>
> "PSK-AES128-CBC-SHA      SSLv3 Kx=PSK      Au=PSK  Enc=AES(128)  Mac=SHA1
> "("PSK-AES128-CBC-SHA", "SSLv3", "Kx=PSK", "Au=PSK", "Enc=AES(128)",
> "Mac=SHA1")
>
> "ECDHE-RSA-RC4-SHA       SSLv3 Kx=ECDH     Au=RSA  Enc=RC4(128)  Mac=SHA1
> "("ECDHE-RSA-RC4-SHA", "SSLv3", "Kx=ECDH", "Au=RSA", "Enc=RC4(128)",
> "Mac=SHA1")
>
> "ECDHE-ECDSA-RC4-SHA     SSLv3 Kx=ECDH     Au=ECDSA Enc=RC4(128)  Mac=SHA1
> "("ECDHE-ECDSA-RC4-SHA", "SSLv3", "Kx=ECDH", "Au=ECDSA", "Enc=RC4(128)",
> "Mac=SHA1")
>
> "ECDH-RSA-RC4-SHA        SSLv3 Kx=ECDH/RSA Au=ECDH Enc=RC4(128)  Mac=SHA1
> "("ECDH-RSA-RC4-SHA", "SSLv3", "Kx=ECDH/RSA", "Au=ECDH", "Enc=RC4(128)",
> "Mac=SHA1")
>
> "ECDH-ECDSA-RC4-SHA      SSLv3 Kx=ECDH/ECDSA Au=ECDH Enc=RC4(128)  Mac=SHA1
> "("ECDH-ECDSA-RC4-SHA", "SSLv3", "Kx=ECDH/ECDSA", "Au=ECDH",
> "Enc=RC4(128)", "Mac=SHA1")
>
> "RC4-SHA                 SSLv3 Kx=RSA      Au=RSA  Enc=RC4(128)  Mac=SHA1
> "("RC4-SHA", "SSLv3", "Kx=RSA", "Au=RSA", "Enc=RC4(128)", "Mac=SHA1")
>
> "RC4-MD5                 SSLv3 Kx=RSA      Au=RSA  Enc=RC4(128)  Mac=MD5
> "("RC4-MD5", "SSLv3", "Kx=RSA", "Au=RSA", "Enc=RC4(128)", "Mac=MD5", "")
>
> "PSK-RC4-SHA             SSLv3 Kx=PSK      Au=PSK  Enc=RC4(128)  Mac=SHA1
> "("PSK-RC4-SHA", "SSLv3", "Kx=PSK", "Au=PSK", "Enc=RC4(128)", "Mac=SHA1")
>
> "ECDHE-RSA-DES-CBC3-SHA  SSLv3 Kx=ECDH     Au=RSA  Enc=3DES(168) Mac=SHA1
> "("ECDHE-RSA-DES-CBC3-SHA", "SSLv3", "Kx=ECDH", "Au=RSA", "Enc=3DES(168)",
> "Mac=SHA1")
>
> "ECDHE-ECDSA-DES-CBC3-SHA SSLv3 Kx=ECDH     Au=ECDSA Enc=3DES(168) Mac=SHA1
> "("ECDHE-ECDSA-DES-CBC3-SHA", "SSLv3", "Kx=ECDH", "Au=ECDSA",
> "Enc=3DES(168)", "Mac=SHA1")
>
> "SRP-DSS-3DES-EDE-CBC-SHA SSLv3 Kx=SRP      Au=DSS  Enc=3DES(168) Mac=SHA1
> "("SRP-DSS-3DES-EDE-CBC-SHA", "SSLv3", "Kx=SRP", "Au=DSS",
> "Enc=3DES(168)", "Mac=SHA1")
>
> "SRP-RSA-3DES-EDE-CBC-SHA SSLv3 Kx=SRP      Au=RSA  Enc=3DES(168) Mac=SHA1
> "("SRP-RSA-3DES-EDE-CBC-SHA", "SSLv3", "Kx=SRP", "Au=RSA",
> "Enc=3DES(168)", "Mac=SHA1")
>
> "SRP-3DES-EDE-CBC-SHA    SSLv3 Kx=SRP      Au=SRP  Enc=3DES(168) Mac=SHA1
> "("SRP-3DES-EDE-CBC-SHA", "SSLv3", "Kx=SRP", "Au=SRP", "Enc=3DES(168)",
> "Mac=SHA1")
>
> "EDH-RSA-DES-CBC3-SHA    SSLv3 Kx=DH       Au=RSA  Enc=3DES(168) Mac=SHA1
> "("EDH-RSA-DES-CBC3-SHA", "SSLv3", "Kx=DH", "Au=RSA", "Enc=3DES(168)",
> "Mac=SHA1")
>
> "EDH-DSS-DES-CBC3-SHA    SSLv3 Kx=DH       Au=DSS  Enc=3DES(168) Mac=SHA1
> "("EDH-DSS-DES-CBC3-SHA", "SSLv3", "Kx=DH", "Au=DSS", "Enc=3DES(168)",
> "Mac=SHA1")
>
> "ECDH-RSA-DES-CBC3-SHA   SSLv3 Kx=ECDH/RSA Au=ECDH Enc=3DES(168) Mac=SHA1
> "("ECDH-RSA-DES-CBC3-SHA", "SSLv3", "Kx=ECDH/RSA", "Au=ECDH",
> "Enc=3DES(168)", "Mac=SHA1")
>
> "ECDH-ECDSA-DES-CBC3-SHA SSLv3 Kx=ECDH/ECDSA Au=ECDH Enc=3DES(168) Mac=SHA1
> "("ECDH-ECDSA-DES-CBC3-SHA", "SSLv3", "Kx=ECDH/ECDSA", "Au=ECDH",
> "Enc=3DES(168)", "Mac=SHA1")
>
> "DES-CBC3-SHA            SSLv3 Kx=RSA      Au=RSA  Enc=3DES(168) Mac=SHA1
> "("DES-CBC3-SHA", "SSLv3", "Kx=RSA", "Au=RSA", "Enc=3DES(168)", "Mac=SHA1")
>
> "PSK-3DES-EDE-CBC-SHA    SSLv3 Kx=PSK      Au=PSK  Enc=3DES(168) Mac=SHA1
> "("PSK-3DES-EDE-CBC-SHA", "SSLv3", "Kx=PSK", "Au=PSK", "Enc=3DES(168)",
> "Mac=SHA1")
>
> "EDH-RSA-DES-CBC-SHA     SSLv3 Kx=DH       Au=RSA  Enc=DES(56)   Mac=SHA1
> "("EDH-RSA-DES-CBC-SHA", "SSLv3", "Kx=DH", "Au=RSA", "Enc=DES(56)",
> "Mac=SHA1")
>
> "EDH-DSS-DES-CBC-SHA     SSLv3 Kx=DH       Au=DSS  Enc=DES(56)   Mac=SHA1
> "("EDH-DSS-DES-CBC-SHA", "SSLv3", "Kx=DH", "Au=DSS", "Enc=DES(56)",
> "Mac=SHA1")
>
> "DES-CBC-SHA             SSLv3 Kx=RSA      Au=RSA  Enc=DES(56)   Mac=SHA1
> "("DES-CBC-SHA", "SSLv3", "Kx=RSA", "Au=RSA", "Enc=DES(56)", "Mac=SHA1")
>
> "EXP-EDH-RSA-DES-CBC-SHA SSLv3 Kx=DH(512)  Au=RSA  Enc=DES(40)   Mac=SHA1
> export
> "("EXP-EDH-RSA-DES-CBC-SHA", "SSLv3", "Kx=DH(512)", "Au=RSA",
> "Enc=DES(40)", "Mac=SHA1", "export")
>
> "EXP-EDH-DSS-DES-CBC-SHA SSLv3 Kx=DH(512)  Au=DSS  Enc=DES(40)   Mac=SHA1
> export
> "("EXP-EDH-DSS-DES-CBC-SHA", "SSLv3", "Kx=DH(512)", "Au=DSS",
> "Enc=DES(40)", "Mac=SHA1", "export")
>
> "EXP-DES-CBC-SHA         SSLv3 Kx=RSA(512) Au=RSA  Enc=DES(40)   Mac=SHA1
> export
> "("EXP-DES-CBC-SHA", "SSLv3", "Kx=RSA(512)", "Au=RSA", "Enc=DES(40)",
> "Mac=SHA1", "export")
>
> "EXP-RC2-CBC-MD5         SSLv3 Kx=RSA(512) Au=RSA  Enc=RC2(40)   Mac=MD5
> export
> "("EXP-RC2-CBC-MD5", "SSLv3", "Kx=RSA(512)", "Au=RSA", "Enc=RC2(40)",
> "Mac=MD5", "export")
>
> "EXP-RC4-MD5             SSLv3 Kx=RSA(512) Au=RSA  Enc=RC4(40)   Mac=MD5
> export
> "("EXP-RC4-MD5", "SSLv3", "Kx=RSA(512)", "Au=RSA", "Enc=RC4(40)",
> "Mac=MD5", "export")
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.kde.org/pipermail/kde-core-devel/attachments/20141021/b4f1ef68/attachment.htm>


More information about the kde-core-devel mailing list