gnutls on RHEL7

Updated -

Details of the capabilities of gnutls-3.3.24 on RHEL7

This article is part of the Securing Applications Collection

Due to the serious issues with the design of TLS and implementation issues in openssl uncovered during the lifetime of RHEL7 you should always use the latest version but at least

gnutls-3.3.29-8.el7

Capabilities

Protocols

  • TLSv1.2
  • TLSv1.1
  • TLSv1
  • SSLv3

Cipher Suites

Suite Name Cipher Suite Minimum Protocol
TLS_RSA_NULL_MD5 0x0001 SSL3.0
TLS_RSA_NULL_SHA1 0x0002 SSL3.0
TLS_RSA_NULL_SHA256 0x003b TLS1.2
TLS_RSA_ARCFOUR_128_SHA1 0x0005 SSL3.0
TLS_RSA_ARCFOUR_128_MD5 0x0004 SSL3.0
TLS_RSA_3DES_EDE_CBC_SHA1 0x000a SSL3.0
TLS_RSA_AES_128_CBC_SHA1 0x002f SSL3.0
TLS_RSA_AES_256_CBC_SHA1 0x0035 SSL3.0
TLS_RSA_CAMELLIA_128_CBC_SHA256 0x00ba TLS1.2
TLS_RSA_CAMELLIA_256_CBC_SHA256 0x00c0 TLS1.2
TLS_RSA_CAMELLIA_128_CBC_SHA1 0x0041 SSL3.0
TLS_RSA_CAMELLIA_256_CBC_SHA1 0x0084 SSL3.0
TLS_RSA_AES_128_CBC_SHA256 0x003c TLS1.2
TLS_RSA_AES_256_CBC_SHA256 0x003d TLS1.2
TLS_RSA_AES_128_GCM_SHA256 0x009c TLS1.2
TLS_RSA_AES_256_GCM_SHA384 0x009d TLS1.2
TLS_RSA_CAMELLIA_128_GCM_SHA256 0xc07a TLS1.2
TLS_RSA_CAMELLIA_256_GCM_SHA384 0xc07b TLS1.2
TLS_RSA_SALSA20_256_SHA1 0xe411 SSL3.0
TLS_RSA_ESTREAM_SALSA20_256_SHA1 0xe410 SSL3.0
TLS_DHE_DSS_ARCFOUR_128_SHA1 0x0066 SSL3.0
TLS_DHE_DSS_3DES_EDE_CBC_SHA1 0x0013 SSL3.0
TLS_DHE_DSS_AES_128_CBC_SHA1 0x0032 SSL3.0
TLS_DHE_DSS_AES_256_CBC_SHA1 0x0038 SSL3.0
TLS_DHE_DSS_CAMELLIA_128_CBC_SHA256 0x00bd TLS1.2
TLS_DHE_DSS_CAMELLIA_256_CBC_SHA256 0x00c3 TLS1.2
TLS_DHE_DSS_CAMELLIA_128_CBC_SHA1 0x0044 SSL3.0
TLS_DHE_DSS_CAMELLIA_256_CBC_SHA1 0x0087 SSL3.0
TLS_DHE_DSS_AES_128_CBC_SHA256 0x0040 TLS1.2
TLS_DHE_DSS_AES_256_CBC_SHA256 0x006a TLS1.2
TLS_DHE_DSS_AES_128_GCM_SHA256 0x00a2 TLS1.2
TLS_DHE_DSS_AES_256_GCM_SHA384 0x00a3 TLS1.2
TLS_DHE_DSS_CAMELLIA_128_GCM_SHA256 0xc080 TLS1.2
TLS_DHE_DSS_CAMELLIA_256_GCM_SHA384 0xc081 TLS1.2
TLS_DHE_RSA_3DES_EDE_CBC_SHA1 0x0016 SSL3.0
TLS_DHE_RSA_AES_128_CBC_SHA1 0x0033 SSL3.0
TLS_DHE_RSA_AES_256_CBC_SHA1 0x0039 SSL3.0
TLS_DHE_RSA_CAMELLIA_128_CBC_SHA256 0x00be TLS1.2
TLS_DHE_RSA_CAMELLIA_256_CBC_SHA256 0x00c4 TLS1.2
TLS_DHE_RSA_CAMELLIA_128_CBC_SHA1 0x0045 SSL3.0
TLS_DHE_RSA_CAMELLIA_256_CBC_SHA1 0x0088 SSL3.0
TLS_DHE_RSA_AES_128_CBC_SHA256 0x0067 TLS1.2
TLS_DHE_RSA_AES_256_CBC_SHA256 0x006b TLS1.2
TLS_DHE_RSA_AES_128_GCM_SHA256 0x009e TLS1.2
TLS_DHE_RSA_AES_256_GCM_SHA384 0x009f TLS1.2
TLS_DHE_RSA_CAMELLIA_128_GCM_SHA256 0xc07c TLS1.2
TLS_DHE_RSA_CAMELLIA_256_GCM_SHA384 0xc07d TLS1.2
TLS_ECDHE_RSA_NULL_SHA1 0xc010 SSL3.0
TLS_ECDHE_RSA_3DES_EDE_CBC_SHA1 0xc012 SSL3.0
TLS_ECDHE_RSA_AES_128_CBC_SHA1 0xc013 SSL3.0
TLS_ECDHE_RSA_AES_256_CBC_SHA1 0xc014 SSL3.0
TLS_ECDHE_RSA_AES_256_CBC_SHA384 0xc028 TLS1.2
TLS_ECDHE_RSA_ARCFOUR_128_SHA1 0xc011 SSL3.0
TLS_ECDHE_RSA_CAMELLIA_128_CBC_SHA256 0xc076 TLS1.2
TLS_ECDHE_RSA_CAMELLIA_256_CBC_SHA384 0xc077 TLS1.2
TLS_ECDHE_ECDSA_NULL_SHA1 0xc006 SSL3.0
TLS_ECDHE_ECDSA_3DES_EDE_CBC_SHA1 0xc008 SSL3.0
TLS_ECDHE_ECDSA_AES_128_CBC_SHA1 0xc009 SSL3.0
TLS_ECDHE_ECDSA_AES_256_CBC_SHA1 0xc00a SSL3.0
TLS_ECDHE_ECDSA_ARCFOUR_128_SHA1 0xc007 SSL3.0
TLS_ECDHE_ECDSA_CAMELLIA_128_CBC_SHA256 0xc072 TLS1.2
TLS_ECDHE_ECDSA_CAMELLIA_256_CBC_SHA384 0xc073 TLS1.2
TLS_ECDHE_ECDSA_AES_128_CBC_SHA256 0xc023 TLS1.2
TLS_ECDHE_RSA_AES_128_CBC_SHA256 0xc027 TLS1.2
TLS_ECDHE_ECDSA_CAMELLIA_128_GCM_SHA256 0xc086 TLS1.2
TLS_ECDHE_ECDSA_CAMELLIA_256_GCM_SHA384 0xc087 TLS1.2
TLS_ECDHE_ECDSA_AES_128_GCM_SHA256 0xc02b TLS1.2
TLS_ECDHE_ECDSA_AES_256_GCM_SHA384 0xc02c TLS1.2
TLS_ECDHE_RSA_AES_128_GCM_SHA256 0xc02f TLS1.2
TLS_ECDHE_RSA_AES_256_GCM_SHA384 0xc030 TLS1.2
TLS_ECDHE_ECDSA_AES_256_CBC_SHA384 0xc024 TLS1.2
TLS_ECDHE_RSA_CAMELLIA_128_GCM_SHA256 0xc08a TLS1.2
TLS_ECDHE_RSA_CAMELLIA_256_GCM_SHA384 0xc08b TLS1.2
TLS_ECDHE_RSA_SALSA20_256_SHA1 0xe413 SSL3.0
TLS_ECDHE_ECDSA_SALSA20_256_SHA1 0xe415 SSL3.0
TLS_ECDHE_RSA_ESTREAM_SALSA20_256_SHA1 0xe412 SSL3.0
TLS_ECDHE_ECDSA_ESTREAM_SALSA20_256_SHA1 0xe414 SSL3.0
TLS_ECDHE_PSK_3DES_EDE_CBC_SHA1 0xc034 SSL3.0
TLS_ECDHE_PSK_AES_128_CBC_SHA1 0xc035 SSL3.0
TLS_ECDHE_PSK_AES_256_CBC_SHA1 0xc036 SSL3.0
TLS_ECDHE_PSK_AES_128_CBC_SHA256 0xc037 TLS1.2
TLS_ECDHE_PSK_AES_256_CBC_SHA384 0xc038 TLS1.2
TLS_ECDHE_PSK_ARCFOUR_128_SHA1 0xc033 SSL3.0
TLS_ECDHE_PSK_NULL_SHA1 0xc039 SSL3.0
TLS_ECDHE_PSK_NULL_SHA256 0xc03a TLS1.2
TLS_ECDHE_PSK_NULL_SHA384 0xc03b TLS1.0
TLS_ECDHE_PSK_CAMELLIA_128_CBC_SHA256 0xc09a TLS1.2
TLS_ECDHE_PSK_CAMELLIA_256_CBC_SHA384 0xc09b TLS1.2
TLS_ECDHE_PSK_SALSA20_256_SHA1 0xe419 SSL3.0
TLS_ECDHE_PSK_ESTREAM_SALSA20_256_SHA1 0xe418 SSL3.0
TLS_PSK_ARCFOUR_128_SHA1 0x008a SSL3.0
TLS_PSK_3DES_EDE_CBC_SHA1 0x008b SSL3.0
TLS_PSK_AES_128_CBC_SHA1 0x008c SSL3.0
TLS_PSK_AES_256_CBC_SHA1 0x008d SSL3.0
TLS_PSK_AES_128_CBC_SHA256 0x00ae TLS1.2
TLS_PSK_AES_256_GCM_SHA384 0x00a9 TLS1.2
TLS_PSK_CAMELLIA_128_GCM_SHA256 0xc08e TLS1.2
TLS_PSK_CAMELLIA_256_GCM_SHA384 0xc08f TLS1.2
TLS_PSK_AES_128_GCM_SHA256 0x00a8 TLS1.2
TLS_PSK_NULL_SHA1 0x002c SSL3.0
TLS_PSK_NULL_SHA256 0x00b0 TLS1.2
TLS_PSK_CAMELLIA_128_CBC_SHA256 0xc094 TLS1.2
TLS_PSK_CAMELLIA_256_CBC_SHA384 0xc095 TLS1.2
TLS_PSK_SALSA20_256_SHA1 0xe417 SSL3.0
TLS_PSK_ESTREAM_SALSA20_256_SHA1 0xe416 SSL3.0
TLS_PSK_AES_256_CBC_SHA384 0x00af TLS1.2
TLS_PSK_NULL_SHA384 0x00b1 TLS1.2
TLS_RSA_PSK_ARCFOUR_128_SHA1 0x0092 TLS1.0
TLS_RSA_PSK_3DES_EDE_CBC_SHA1 0x0093 TLS1.0
TLS_RSA_PSK_AES_128_CBC_SHA1 0x0094 TLS1.0
TLS_RSA_PSK_AES_256_CBC_SHA1 0x0095 TLS1.0
TLS_RSA_PSK_CAMELLIA_128_GCM_SHA256 0xc092 TLS1.2
TLS_RSA_PSK_CAMELLIA_256_GCM_SHA384 0xc093 TLS1.2
TLS_RSA_PSK_AES_128_GCM_SHA256 0x00ac TLS1.2
TLS_RSA_PSK_AES_128_CBC_SHA256 0x00b6 TLS1.2
TLS_RSA_PSK_NULL_SHA1 0x002e TLS1.0
TLS_RSA_PSK_NULL_SHA256 0x00b8 TLS1.2
TLS_RSA_PSK_AES_256_GCM_SHA384 0x00ad TLS1.2
TLS_RSA_PSK_AES_256_CBC_SHA384 0x00b7 TLS1.2
TLS_RSA_PSK_NULL_SHA384 0x00b9 TLS1.2
TLS_RSA_PSK_CAMELLIA_128_CBC_SHA256 0xc098 TLS1.2
TLS_RSA_PSK_CAMELLIA_256_CBC_SHA384 0xc099 TLS1.2
TLS_DHE_PSK_ARCFOUR_128_SHA1 0x008e SSL3.0
TLS_DHE_PSK_3DES_EDE_CBC_SHA1 0x008f SSL3.0
TLS_DHE_PSK_AES_128_CBC_SHA1 0x0090 SSL3.0
TLS_DHE_PSK_AES_256_CBC_SHA1 0x0091 SSL3.0
TLS_DHE_PSK_AES_128_CBC_SHA256 0x00b2 TLS1.2
TLS_DHE_PSK_AES_128_GCM_SHA256 0x00aa TLS1.2
TLS_DHE_PSK_NULL_SHA1 0x002d SSL3.0
TLS_DHE_PSK_NULL_SHA256 0x00b4 TLS1.2
TLS_DHE_PSK_NULL_SHA384 0x00b5 TLS1.2
TLS_DHE_PSK_AES_256_CBC_SHA384 0x00b3 TLS1.2
TLS_DHE_PSK_AES_256_GCM_SHA384 0x00ab TLS1.2
TLS_DHE_PSK_CAMELLIA_128_CBC_SHA256 0xc096 TLS1.2
TLS_DHE_PSK_CAMELLIA_256_CBC_SHA384 0xc097 TLS1.2
TLS_DHE_PSK_CAMELLIA_128_GCM_SHA256 0xc090 TLS1.2
TLS_DHE_PSK_CAMELLIA_256_GCM_SHA384 0xc091 TLS1.2
TLS_DH_ANON_ARCFOUR_128_MD5 0x0018 SSL3.0
TLS_DH_ANON_3DES_EDE_CBC_SHA1 0x001b SSL3.0
TLS_DH_ANON_AES_128_CBC_SHA1 0x0034 SSL3.0
TLS_DH_ANON_AES_256_CBC_SHA1 0x003a SSL3.0
TLS_DH_ANON_CAMELLIA_128_CBC_SHA256 0x00bf TLS1.2
TLS_DH_ANON_CAMELLIA_256_CBC_SHA256 0x00c5 TLS1.2
TLS_DH_ANON_CAMELLIA_128_CBC_SHA1 0x0046 SSL3.0
TLS_DH_ANON_CAMELLIA_256_CBC_SHA1 0x0089 SSL3.0
TLS_DH_ANON_AES_128_CBC_SHA256 0x006c TLS1.2
TLS_DH_ANON_AES_256_CBC_SHA256 0x006d TLS1.2
TLS_DH_ANON_AES_128_GCM_SHA256 0x00a6 TLS1.2
TLS_DH_ANON_AES_256_GCM_SHA384 0x00a7 TLS1.2
TLS_DH_ANON_CAMELLIA_128_GCM_SHA256 0xc084 TLS1.2
TLS_DH_ANON_CAMELLIA_256_GCM_SHA384 0xc085 TLS1.2
TLS_ECDH_ANON_NULL_SHA1 0xc015 SSL3.0
TLS_ECDH_ANON_3DES_EDE_CBC_SHA1 0xc017 SSL3.0
TLS_ECDH_ANON_AES_128_CBC_SHA1 0xc018 SSL3.0
TLS_ECDH_ANON_AES_256_CBC_SHA1 0xc019 SSL3.0
TLS_ECDH_ANON_ARCFOUR_128_SHA1 0xc016 SSL3.0

Certificates

  • certificates with RSA keys and SHA-1 or SHA-256 signatures.
  • certificates with EC keys and DSA or SHA-256 signatures

Hashes

  • md5 message digest algorithm
  • sha1 message digest algorithm
  • sha224 message digest algorithm
  • sha256 message digest algorithm
  • sha384 message digest algorithm
  • sha512 message digest algorithm

Additional Notes

Capabilities as given by gnutls-cli

$ gnutls-cli --list
Cipher suites:
TLS_RSA_NULL_MD5                                    0x00, 0x01  SSL3.0
TLS_RSA_NULL_SHA1                                   0x00, 0x02  SSL3.0
TLS_RSA_NULL_SHA256                                 0x00, 0x3b  TLS1.2
TLS_RSA_ARCFOUR_128_SHA1                            0x00, 0x05  SSL3.0
TLS_RSA_ARCFOUR_128_MD5                             0x00, 0x04  SSL3.0
TLS_RSA_3DES_EDE_CBC_SHA1                           0x00, 0x0a  SSL3.0
TLS_RSA_AES_128_CBC_SHA1                            0x00, 0x2f  SSL3.0
TLS_RSA_AES_256_CBC_SHA1                            0x00, 0x35  SSL3.0
TLS_RSA_CAMELLIA_128_CBC_SHA256                     0x00, 0xba  TLS1.2
TLS_RSA_CAMELLIA_256_CBC_SHA256                     0x00, 0xc0  TLS1.2
TLS_RSA_CAMELLIA_128_CBC_SHA1                       0x00, 0x41  SSL3.0
TLS_RSA_CAMELLIA_256_CBC_SHA1                       0x00, 0x84  SSL3.0
TLS_RSA_AES_128_CBC_SHA256                          0x00, 0x3c  TLS1.2
TLS_RSA_AES_256_CBC_SHA256                          0x00, 0x3d  TLS1.2
TLS_RSA_AES_128_GCM_SHA256                          0x00, 0x9c  TLS1.2
TLS_RSA_AES_256_GCM_SHA384                          0x00, 0x9d  TLS1.2
TLS_RSA_CAMELLIA_128_GCM_SHA256                     0xc0, 0x7a  TLS1.2
TLS_RSA_CAMELLIA_256_GCM_SHA384                     0xc0, 0x7b  TLS1.2
TLS_RSA_SALSA20_256_SHA1                            0xe4, 0x11  SSL3.0
TLS_RSA_ESTREAM_SALSA20_256_SHA1                    0xe4, 0x10  SSL3.0
TLS_DHE_DSS_ARCFOUR_128_SHA1                        0x00, 0x66  SSL3.0
TLS_DHE_DSS_3DES_EDE_CBC_SHA1                       0x00, 0x13  SSL3.0
TLS_DHE_DSS_AES_128_CBC_SHA1                        0x00, 0x32  SSL3.0
TLS_DHE_DSS_AES_256_CBC_SHA1                        0x00, 0x38  SSL3.0
TLS_DHE_DSS_CAMELLIA_128_CBC_SHA256                 0x00, 0xbd  TLS1.2
TLS_DHE_DSS_CAMELLIA_256_CBC_SHA256                 0x00, 0xc3  TLS1.2
TLS_DHE_DSS_CAMELLIA_128_CBC_SHA1                   0x00, 0x44  SSL3.0
TLS_DHE_DSS_CAMELLIA_256_CBC_SHA1                   0x00, 0x87  SSL3.0
TLS_DHE_DSS_AES_128_CBC_SHA256                      0x00, 0x40  TLS1.2
TLS_DHE_DSS_AES_256_CBC_SHA256                      0x00, 0x6a  TLS1.2
TLS_DHE_DSS_AES_128_GCM_SHA256                      0x00, 0xa2  TLS1.2
TLS_DHE_DSS_AES_256_GCM_SHA384                      0x00, 0xa3  TLS1.2
TLS_DHE_DSS_CAMELLIA_128_GCM_SHA256                 0xc0, 0x80  TLS1.2
TLS_DHE_DSS_CAMELLIA_256_GCM_SHA384                 0xc0, 0x81  TLS1.2
TLS_DHE_RSA_3DES_EDE_CBC_SHA1                       0x00, 0x16  SSL3.0
TLS_DHE_RSA_AES_128_CBC_SHA1                        0x00, 0x33  SSL3.0
TLS_DHE_RSA_AES_256_CBC_SHA1                        0x00, 0x39  SSL3.0
TLS_DHE_RSA_CAMELLIA_128_CBC_SHA256                 0x00, 0xbe  TLS1.2
TLS_DHE_RSA_CAMELLIA_256_CBC_SHA256                 0x00, 0xc4  TLS1.2
TLS_DHE_RSA_CAMELLIA_128_CBC_SHA1                   0x00, 0x45  SSL3.0
TLS_DHE_RSA_CAMELLIA_256_CBC_SHA1                   0x00, 0x88  SSL3.0
TLS_DHE_RSA_AES_128_CBC_SHA256                      0x00, 0x67  TLS1.2
TLS_DHE_RSA_AES_256_CBC_SHA256                      0x00, 0x6b  TLS1.2
TLS_DHE_RSA_AES_128_GCM_SHA256                      0x00, 0x9e  TLS1.2
TLS_DHE_RSA_AES_256_GCM_SHA384                      0x00, 0x9f  TLS1.2
TLS_DHE_RSA_CAMELLIA_128_GCM_SHA256                 0xc0, 0x7c  TLS1.2
TLS_DHE_RSA_CAMELLIA_256_GCM_SHA384                 0xc0, 0x7d  TLS1.2
TLS_ECDHE_RSA_NULL_SHA1                             0xc0, 0x10  SSL3.0
TLS_ECDHE_RSA_3DES_EDE_CBC_SHA1                     0xc0, 0x12  SSL3.0
TLS_ECDHE_RSA_AES_128_CBC_SHA1                      0xc0, 0x13  SSL3.0
TLS_ECDHE_RSA_AES_256_CBC_SHA1                      0xc0, 0x14  SSL3.0
TLS_ECDHE_RSA_AES_256_CBC_SHA384                    0xc0, 0x28  TLS1.2
TLS_ECDHE_RSA_ARCFOUR_128_SHA1                      0xc0, 0x11  SSL3.0
TLS_ECDHE_RSA_CAMELLIA_128_CBC_SHA256               0xc0, 0x76  TLS1.2
TLS_ECDHE_RSA_CAMELLIA_256_CBC_SHA384               0xc0, 0x77  TLS1.2
TLS_ECDHE_ECDSA_NULL_SHA1                           0xc0, 0x06  SSL3.0
TLS_ECDHE_ECDSA_3DES_EDE_CBC_SHA1                   0xc0, 0x08  SSL3.0
TLS_ECDHE_ECDSA_AES_128_CBC_SHA1                    0xc0, 0x09  SSL3.0
TLS_ECDHE_ECDSA_AES_256_CBC_SHA1                    0xc0, 0x0a  SSL3.0
TLS_ECDHE_ECDSA_ARCFOUR_128_SHA1                    0xc0, 0x07  SSL3.0
TLS_ECDHE_ECDSA_CAMELLIA_128_CBC_SHA256             0xc0, 0x72  TLS1.2
TLS_ECDHE_ECDSA_CAMELLIA_256_CBC_SHA384             0xc0, 0x73  TLS1.2
TLS_ECDHE_ECDSA_AES_128_CBC_SHA256                  0xc0, 0x23  TLS1.2
TLS_ECDHE_RSA_AES_128_CBC_SHA256                    0xc0, 0x27  TLS1.2
TLS_ECDHE_ECDSA_CAMELLIA_128_GCM_SHA256             0xc0, 0x86  TLS1.2
TLS_ECDHE_ECDSA_CAMELLIA_256_GCM_SHA384             0xc0, 0x87  TLS1.2
TLS_ECDHE_ECDSA_AES_128_GCM_SHA256                  0xc0, 0x2b  TLS1.2
TLS_ECDHE_ECDSA_AES_256_GCM_SHA384                  0xc0, 0x2c  TLS1.2
TLS_ECDHE_RSA_AES_128_GCM_SHA256                    0xc0, 0x2f  TLS1.2
TLS_ECDHE_RSA_AES_256_GCM_SHA384                    0xc0, 0x30  TLS1.2
TLS_ECDHE_ECDSA_AES_256_CBC_SHA384                  0xc0, 0x24  TLS1.2
TLS_ECDHE_RSA_CAMELLIA_128_GCM_SHA256               0xc0, 0x8a  TLS1.2
TLS_ECDHE_RSA_CAMELLIA_256_GCM_SHA384               0xc0, 0x8b  TLS1.2
TLS_ECDHE_RSA_SALSA20_256_SHA1                      0xe4, 0x13  SSL3.0
TLS_ECDHE_ECDSA_SALSA20_256_SHA1                    0xe4, 0x15  SSL3.0
TLS_ECDHE_RSA_ESTREAM_SALSA20_256_SHA1              0xe4, 0x12  SSL3.0
TLS_ECDHE_ECDSA_ESTREAM_SALSA20_256_SHA1            0xe4, 0x14  SSL3.0
TLS_ECDHE_PSK_3DES_EDE_CBC_SHA1                     0xc0, 0x34  SSL3.0
TLS_ECDHE_PSK_AES_128_CBC_SHA1                      0xc0, 0x35  SSL3.0
TLS_ECDHE_PSK_AES_256_CBC_SHA1                      0xc0, 0x36  SSL3.0
TLS_ECDHE_PSK_AES_128_CBC_SHA256                    0xc0, 0x37  TLS1.2
TLS_ECDHE_PSK_AES_256_CBC_SHA384                    0xc0, 0x38  TLS1.2
TLS_ECDHE_PSK_ARCFOUR_128_SHA1                      0xc0, 0x33  SSL3.0
TLS_ECDHE_PSK_NULL_SHA1                             0xc0, 0x39  SSL3.0
TLS_ECDHE_PSK_NULL_SHA256                           0xc0, 0x3a  TLS1.2
TLS_ECDHE_PSK_NULL_SHA384                           0xc0, 0x3b  TLS1.0
TLS_ECDHE_PSK_CAMELLIA_128_CBC_SHA256               0xc0, 0x9a  TLS1.2
TLS_ECDHE_PSK_CAMELLIA_256_CBC_SHA384               0xc0, 0x9b  TLS1.2
TLS_ECDHE_PSK_SALSA20_256_SHA1                      0xe4, 0x19  SSL3.0
TLS_ECDHE_PSK_ESTREAM_SALSA20_256_SHA1              0xe4, 0x18  SSL3.0
TLS_PSK_ARCFOUR_128_SHA1                            0x00, 0x8a  SSL3.0
TLS_PSK_3DES_EDE_CBC_SHA1                           0x00, 0x8b  SSL3.0
TLS_PSK_AES_128_CBC_SHA1                            0x00, 0x8c  SSL3.0
TLS_PSK_AES_256_CBC_SHA1                            0x00, 0x8d  SSL3.0
TLS_PSK_AES_128_CBC_SHA256                          0x00, 0xae  TLS1.2
TLS_PSK_AES_256_GCM_SHA384                          0x00, 0xa9  TLS1.2
TLS_PSK_CAMELLIA_128_GCM_SHA256                     0xc0, 0x8e  TLS1.2
TLS_PSK_CAMELLIA_256_GCM_SHA384                     0xc0, 0x8f  TLS1.2
TLS_PSK_AES_128_GCM_SHA256                          0x00, 0xa8  TLS1.2
TLS_PSK_NULL_SHA1                                   0x00, 0x2c  SSL3.0
TLS_PSK_NULL_SHA256                                 0x00, 0xb0  TLS1.2
TLS_PSK_CAMELLIA_128_CBC_SHA256                     0xc0, 0x94  TLS1.2
TLS_PSK_CAMELLIA_256_CBC_SHA384                     0xc0, 0x95  TLS1.2
TLS_PSK_SALSA20_256_SHA1                            0xe4, 0x17  SSL3.0
TLS_PSK_ESTREAM_SALSA20_256_SHA1                    0xe4, 0x16  SSL3.0
TLS_PSK_AES_256_CBC_SHA384                          0x00, 0xaf  TLS1.2
TLS_PSK_NULL_SHA384                                 0x00, 0xb1  TLS1.2
TLS_RSA_PSK_ARCFOUR_128_SHA1                        0x00, 0x92  TLS1.0
TLS_RSA_PSK_3DES_EDE_CBC_SHA1                       0x00, 0x93  TLS1.0
TLS_RSA_PSK_AES_128_CBC_SHA1                        0x00, 0x94  TLS1.0
TLS_RSA_PSK_AES_256_CBC_SHA1                        0x00, 0x95  TLS1.0
TLS_RSA_PSK_CAMELLIA_128_GCM_SHA256                 0xc0, 0x92  TLS1.2
TLS_RSA_PSK_CAMELLIA_256_GCM_SHA384                 0xc0, 0x93  TLS1.2
TLS_RSA_PSK_AES_128_GCM_SHA256                      0x00, 0xac  TLS1.2
TLS_RSA_PSK_AES_128_CBC_SHA256                      0x00, 0xb6  TLS1.2
TLS_RSA_PSK_NULL_SHA1                               0x00, 0x2e  TLS1.0
TLS_RSA_PSK_NULL_SHA256                             0x00, 0xb8  TLS1.2
TLS_RSA_PSK_AES_256_GCM_SHA384                      0x00, 0xad  TLS1.2
TLS_RSA_PSK_AES_256_CBC_SHA384                      0x00, 0xb7  TLS1.2
TLS_RSA_PSK_NULL_SHA384                             0x00, 0xb9  TLS1.2
TLS_RSA_PSK_CAMELLIA_128_CBC_SHA256                 0xc0, 0x98  TLS1.2
TLS_RSA_PSK_CAMELLIA_256_CBC_SHA384                 0xc0, 0x99  TLS1.2
TLS_DHE_PSK_ARCFOUR_128_SHA1                        0x00, 0x8e  SSL3.0
TLS_DHE_PSK_3DES_EDE_CBC_SHA1                       0x00, 0x8f  SSL3.0
TLS_DHE_PSK_AES_128_CBC_SHA1                        0x00, 0x90  SSL3.0
TLS_DHE_PSK_AES_256_CBC_SHA1                        0x00, 0x91  SSL3.0
TLS_DHE_PSK_AES_128_CBC_SHA256                      0x00, 0xb2  TLS1.2
TLS_DHE_PSK_AES_128_GCM_SHA256                      0x00, 0xaa  TLS1.2
TLS_DHE_PSK_NULL_SHA1                               0x00, 0x2d  SSL3.0
TLS_DHE_PSK_NULL_SHA256                             0x00, 0xb4  TLS1.2
TLS_DHE_PSK_NULL_SHA384                             0x00, 0xb5  TLS1.2
TLS_DHE_PSK_AES_256_CBC_SHA384                      0x00, 0xb3  TLS1.2
TLS_DHE_PSK_AES_256_GCM_SHA384                      0x00, 0xab  TLS1.2
TLS_DHE_PSK_CAMELLIA_128_CBC_SHA256                 0xc0, 0x96  TLS1.2
TLS_DHE_PSK_CAMELLIA_256_CBC_SHA384                 0xc0, 0x97  TLS1.2
TLS_DHE_PSK_CAMELLIA_128_GCM_SHA256                 0xc0, 0x90  TLS1.2
TLS_DHE_PSK_CAMELLIA_256_GCM_SHA384                 0xc0, 0x91  TLS1.2
TLS_DH_ANON_ARCFOUR_128_MD5                         0x00, 0x18  SSL3.0
TLS_DH_ANON_3DES_EDE_CBC_SHA1                       0x00, 0x1b  SSL3.0
TLS_DH_ANON_AES_128_CBC_SHA1                        0x00, 0x34  SSL3.0
TLS_DH_ANON_AES_256_CBC_SHA1                        0x00, 0x3a  SSL3.0
TLS_DH_ANON_CAMELLIA_128_CBC_SHA256                 0x00, 0xbf  TLS1.2
TLS_DH_ANON_CAMELLIA_256_CBC_SHA256                 0x00, 0xc5  TLS1.2
TLS_DH_ANON_CAMELLIA_128_CBC_SHA1                   0x00, 0x46  SSL3.0
TLS_DH_ANON_CAMELLIA_256_CBC_SHA1                   0x00, 0x89  SSL3.0
TLS_DH_ANON_AES_128_CBC_SHA256                      0x00, 0x6c  TLS1.2
TLS_DH_ANON_AES_256_CBC_SHA256                      0x00, 0x6d  TLS1.2
TLS_DH_ANON_AES_128_GCM_SHA256                      0x00, 0xa6  TLS1.2
TLS_DH_ANON_AES_256_GCM_SHA384                      0x00, 0xa7  TLS1.2
TLS_DH_ANON_CAMELLIA_128_GCM_SHA256                 0xc0, 0x84  TLS1.2
TLS_DH_ANON_CAMELLIA_256_GCM_SHA384                 0xc0, 0x85  TLS1.2
TLS_ECDH_ANON_NULL_SHA1                             0xc0, 0x15  SSL3.0
TLS_ECDH_ANON_3DES_EDE_CBC_SHA1                     0xc0, 0x17  SSL3.0
TLS_ECDH_ANON_AES_128_CBC_SHA1                      0xc0, 0x18  SSL3.0
TLS_ECDH_ANON_AES_256_CBC_SHA1                      0xc0, 0x19  SSL3.0
TLS_ECDH_ANON_ARCFOUR_128_SHA1                      0xc0, 0x16  SSL3.0

Certificate types: CTYPE-X.509, CTYPE-OPENPGP
Protocols: VERS-SSL3.0, VERS-TLS1.0, VERS-TLS1.1, VERS-TLS1.2, VERS-DTLS0.9, VERS-DTLS1.0, VERS-DTLS1.2
Ciphers: AES-256-CBC, AES-192-CBC, AES-128-CBC, AES-128-GCM, AES-256-GCM, ARCFOUR-128, ESTREAM-SALSA20-256, SALSA20-256, CAMELLIA-256-CBC, CAMELLIA-192-CBC, CAMELLIA-128-CBC, CAMELLIA-128-GCM, CAMELLIA-256-GCM, 3DES-CBC, DES-CBC, ARCFOUR-40, RC2-40, NULL
MACs: SHA1, MD5, SHA256, SHA384, SHA512, SHA224, UMAC-96, UMAC-128, AEAD
Digests: SHA1, MD5, SHA256, SHA384, SHA512, SHA224
Key exchange algorithms: ANON-DH, ANON-ECDH, RSA, DHE-RSA, DHE-DSS, ECDHE-RSA, ECDHE-ECDSA, PSK, RSA-PSK, DHE-PSK, ECDHE-PSK, RSA-EXPORT
Compression: COMP-DEFLATE, COMP-NULL
Elliptic curves: CURVE-SECP256R1, CURVE-SECP384R1, CURVE-SECP521R1
Public Key Systems: RSA, DSA, EC
PK-signatures: SIGN-RSA-SHA1, SIGN-RSA-SHA1, SIGN-RSA-SHA224, SIGN-RSA-SHA256, SIGN-RSA-SHA384, SIGN-RSA-SHA512, SIGN-RSA-RMD160, SIGN-DSA-SHA1, SIGN-DSA-SHA1, SIGN-DSA-SHA224, SIGN-DSA-SHA256, SIGN-RSA-MD5, SIGN-RSA-MD5, SIGN-RSA-MD2, SIGN-ECDSA-SHA1, SIGN-ECDSA-SHA224, SIGN-ECDSA-SHA256, SIGN-ECDSA-SHA384, SIGN-ECDSA-SHA512