gnutls on RHEL8

Updated -

Details of the capabilities of gnutls-3.6.5 on RHEL8

This article is part of the Securing Applications Collection

Cryptography in RHEL8

RHEL8 has a new mechnism to centralise the cryptographic defaults for a machine.
This is handled by the crypto-policies package. Details of the rationale and update policy can be found in other documents

Capabilities

Protocols

  • TLSv1.3
  • TLSv1.2
  • TLSv1.1
  • TLSv1

(Note that although SSLv3 may be listed below, it is not supported)

Cipher Suites

Suite Name Cipher Suite Minimum Protocol
TLS_AES_128_GCM_SHA256 0x1301 TLS1.3
TLS_AES_256_GCM_SHA384 0x1302 TLS1.3
TLS_CHACHA20_POLY1305_SHA256 0x1303 TLS1.3
TLS_AES_128_CCM_SHA256 0x1304 TLS1.3
TLS_AES_128_CCM_8_SHA256 0x1305 TLS1.3
TLS_RSA_NULL_MD5 0x0001 TLS1.0
TLS_RSA_NULL_SHA1 0x0002 TLS1.0
TLS_RSA_NULL_SHA256 0x003b TLS1.2
TLS_RSA_ARCFOUR_128_SHA1 0x0005 TLS1.0
TLS_RSA_ARCFOUR_128_MD5 0x0004 TLS1.0
TLS_RSA_3DES_EDE_CBC_SHA1 0x000a TLS1.0
TLS_RSA_AES_128_CBC_SHA1 0x002f TLS1.0
TLS_RSA_AES_256_CBC_SHA1 0x0035 TLS1.0
TLS_RSA_CAMELLIA_128_CBC_SHA256 0x00ba TLS1.2
TLS_RSA_CAMELLIA_256_CBC_SHA256 0x00c0 TLS1.2
TLS_RSA_CAMELLIA_128_CBC_SHA1 0x0041 TLS1.0
TLS_RSA_CAMELLIA_256_CBC_SHA1 0x0084 TLS1.0
TLS_RSA_AES_128_CBC_SHA256 0x003c TLS1.2
TLS_RSA_AES_256_CBC_SHA256 0x003d TLS1.2
TLS_RSA_AES_128_GCM_SHA256 0x009c TLS1.2
TLS_RSA_AES_256_GCM_SHA384 0x009d TLS1.2
TLS_RSA_CAMELLIA_128_GCM_SHA256 0xc07a TLS1.2
TLS_RSA_CAMELLIA_256_GCM_SHA384 0xc07b TLS1.2
TLS_RSA_AES_128_CCM 0xc09c TLS1.2
TLS_RSA_AES_256_CCM 0xc09d TLS1.2
TLS_RSA_AES_128_CCM_8 0xc0a0 TLS1.2
TLS_RSA_AES_256_CCM_8 0xc0a1 TLS1.2
TLS_DHE_DSS_ARCFOUR_128_SHA1 0x0066 TLS1.0
TLS_DHE_DSS_3DES_EDE_CBC_SHA1 0x0013 TLS1.0
TLS_DHE_DSS_AES_128_CBC_SHA1 0x0032 TLS1.0
TLS_DHE_DSS_AES_256_CBC_SHA1 0x0038 TLS1.0
TLS_DHE_DSS_CAMELLIA_128_CBC_SHA256 0x00bd TLS1.2
TLS_DHE_DSS_CAMELLIA_256_CBC_SHA256 0x00c3 TLS1.2
TLS_DHE_DSS_CAMELLIA_128_CBC_SHA1 0x0044 TLS1.0
TLS_DHE_DSS_CAMELLIA_256_CBC_SHA1 0x0087 TLS1.0
TLS_DHE_DSS_AES_128_CBC_SHA256 0x0040 TLS1.2
TLS_DHE_DSS_AES_256_CBC_SHA256 0x006a TLS1.2
TLS_DHE_DSS_AES_128_GCM_SHA256 0x00a2 TLS1.2
TLS_DHE_DSS_AES_256_GCM_SHA384 0x00a3 TLS1.2
TLS_DHE_DSS_CAMELLIA_128_GCM_SHA256 0xc080 TLS1.2
TLS_DHE_DSS_CAMELLIA_256_GCM_SHA384 0xc081 TLS1.2
TLS_DHE_RSA_3DES_EDE_CBC_SHA1 0x0016 TLS1.0
TLS_DHE_RSA_AES_128_CBC_SHA1 0x0033 TLS1.0
TLS_DHE_RSA_AES_256_CBC_SHA1 0x0039 TLS1.0
TLS_DHE_RSA_CAMELLIA_128_CBC_SHA256 0x00be TLS1.2
TLS_DHE_RSA_CAMELLIA_256_CBC_SHA256 0x00c4 TLS1.2
TLS_DHE_RSA_CAMELLIA_128_CBC_SHA1 0x0045 TLS1.0
TLS_DHE_RSA_CAMELLIA_256_CBC_SHA1 0x0088 TLS1.0
TLS_DHE_RSA_AES_128_CBC_SHA256 0x0067 TLS1.2
TLS_DHE_RSA_AES_256_CBC_SHA256 0x006b TLS1.2
TLS_DHE_RSA_AES_128_GCM_SHA256 0x009e TLS1.2
TLS_DHE_RSA_AES_256_GCM_SHA384 0x009f TLS1.2
TLS_DHE_RSA_CAMELLIA_128_GCM_SHA256 0xc07c TLS1.2
TLS_DHE_RSA_CAMELLIA_256_GCM_SHA384 0xc07d TLS1.2
TLS_DHE_RSA_CHACHA20_POLY1305 0xccaa TLS1.2
TLS_DHE_RSA_AES_128_CCM 0xc09e TLS1.2
TLS_DHE_RSA_AES_256_CCM 0xc09f TLS1.2
TLS_DHE_RSA_AES_128_CCM_8 0xc0a2 TLS1.2
TLS_DHE_RSA_AES_256_CCM_8 0xc0a3 TLS1.2
TLS_ECDHE_RSA_NULL_SHA1 0xc010 TLS1.0
TLS_ECDHE_RSA_3DES_EDE_CBC_SHA1 0xc012 TLS1.0
TLS_ECDHE_RSA_AES_128_CBC_SHA1 0xc013 TLS1.0
TLS_ECDHE_RSA_AES_256_CBC_SHA1 0xc014 TLS1.0
TLS_ECDHE_RSA_AES_256_CBC_SHA384 0xc028 TLS1.2
TLS_ECDHE_RSA_ARCFOUR_128_SHA1 0xc011 TLS1.0
TLS_ECDHE_RSA_CAMELLIA_128_CBC_SHA256 0xc076 TLS1.2
TLS_ECDHE_RSA_CAMELLIA_256_CBC_SHA384 0xc077 TLS1.2
TLS_ECDHE_ECDSA_NULL_SHA1 0xc006 TLS1.0
TLS_ECDHE_ECDSA_3DES_EDE_CBC_SHA1 0xc008 TLS1.0
TLS_ECDHE_ECDSA_AES_128_CBC_SHA1 0xc009 TLS1.0
TLS_ECDHE_ECDSA_AES_256_CBC_SHA1 0xc00a TLS1.0
TLS_ECDHE_ECDSA_ARCFOUR_128_SHA1 0xc007 TLS1.0
TLS_ECDHE_ECDSA_CAMELLIA_128_CBC_SHA256 0xc072 TLS1.2
TLS_ECDHE_ECDSA_CAMELLIA_256_CBC_SHA384 0xc073 TLS1.2
TLS_ECDHE_ECDSA_AES_128_CBC_SHA256 0xc023 TLS1.2
TLS_ECDHE_RSA_AES_128_CBC_SHA256 0xc027 TLS1.2
TLS_ECDHE_ECDSA_CAMELLIA_128_GCM_SHA256 0xc086 TLS1.2
TLS_ECDHE_ECDSA_CAMELLIA_256_GCM_SHA384 0xc087 TLS1.2
TLS_ECDHE_ECDSA_AES_128_GCM_SHA256 0xc02b TLS1.2
TLS_ECDHE_ECDSA_AES_256_GCM_SHA384 0xc02c TLS1.2
TLS_ECDHE_RSA_AES_128_GCM_SHA256 0xc02f TLS1.2
TLS_ECDHE_RSA_AES_256_GCM_SHA384 0xc030 TLS1.2
TLS_ECDHE_ECDSA_AES_256_CBC_SHA384 0xc024 TLS1.2
TLS_ECDHE_RSA_CAMELLIA_128_GCM_SHA256 0xc08a TLS1.2
TLS_ECDHE_RSA_CAMELLIA_256_GCM_SHA384 0xc08b TLS1.2
TLS_ECDHE_RSA_CHACHA20_POLY1305 0xcca8 TLS1.2
TLS_ECDHE_ECDSA_CHACHA20_POLY1305 0xcca9 TLS1.2
TLS_ECDHE_ECDSA_AES_128_CCM 0xc0ac TLS1.2
TLS_ECDHE_ECDSA_AES_256_CCM 0xc0ad TLS1.2
TLS_ECDHE_ECDSA_AES_128_CCM_8 0xc0ae TLS1.2
TLS_ECDHE_ECDSA_AES_256_CCM_8 0xc0af TLS1.2
TLS_ECDHE_PSK_3DES_EDE_CBC_SHA1 0xc034 TLS1.0
TLS_ECDHE_PSK_AES_128_CBC_SHA1 0xc035 TLS1.0
TLS_ECDHE_PSK_AES_256_CBC_SHA1 0xc036 TLS1.0
TLS_ECDHE_PSK_AES_128_CBC_SHA256 0xc037 TLS1.2
TLS_ECDHE_PSK_AES_256_CBC_SHA384 0xc038 TLS1.2
TLS_ECDHE_PSK_ARCFOUR_128_SHA1 0xc033 TLS1.0
TLS_ECDHE_PSK_NULL_SHA1 0xc039 TLS1.0
TLS_ECDHE_PSK_NULL_SHA256 0xc03a TLS1.2
TLS_ECDHE_PSK_NULL_SHA384 0xc03b TLS1.0
TLS_ECDHE_PSK_CAMELLIA_128_CBC_SHA256 0xc09a TLS1.2
TLS_ECDHE_PSK_CAMELLIA_256_CBC_SHA384 0xc09b TLS1.2
TLS_PSK_ARCFOUR_128_SHA1 0x008a TLS1.0
TLS_PSK_3DES_EDE_CBC_SHA1 0x008b TLS1.0
TLS_PSK_AES_128_CBC_SHA1 0x008c TLS1.0
TLS_PSK_AES_256_CBC_SHA1 0x008d TLS1.0
TLS_PSK_AES_128_CBC_SHA256 0x00ae TLS1.2
TLS_PSK_AES_256_GCM_SHA384 0x00a9 TLS1.2
TLS_PSK_CAMELLIA_128_GCM_SHA256 0xc08e TLS1.2
TLS_PSK_CAMELLIA_256_GCM_SHA384 0xc08f TLS1.2
TLS_PSK_AES_128_GCM_SHA256 0x00a8 TLS1.2
TLS_PSK_NULL_SHA1 0x002c TLS1.0
TLS_PSK_NULL_SHA256 0x00b0 TLS1.2
TLS_PSK_CAMELLIA_128_CBC_SHA256 0xc094 TLS1.2
TLS_PSK_CAMELLIA_256_CBC_SHA384 0xc095 TLS1.2
TLS_PSK_AES_256_CBC_SHA384 0x00af TLS1.2
TLS_PSK_NULL_SHA384 0x00b1 TLS1.2
TLS_RSA_PSK_ARCFOUR_128_SHA1 0x0092 TLS1.0
TLS_RSA_PSK_3DES_EDE_CBC_SHA1 0x0093 TLS1.0
TLS_RSA_PSK_AES_128_CBC_SHA1 0x0094 TLS1.0
TLS_RSA_PSK_AES_256_CBC_SHA1 0x0095 TLS1.0
TLS_RSA_PSK_CAMELLIA_128_GCM_SHA256 0xc092 TLS1.2
TLS_RSA_PSK_CAMELLIA_256_GCM_SHA384 0xc093 TLS1.2
TLS_RSA_PSK_AES_128_GCM_SHA256 0x00ac TLS1.2
TLS_RSA_PSK_AES_128_CBC_SHA256 0x00b6 TLS1.2
TLS_RSA_PSK_NULL_SHA1 0x002e TLS1.0
TLS_RSA_PSK_NULL_SHA256 0x00b8 TLS1.2
TLS_RSA_PSK_AES_256_GCM_SHA384 0x00ad TLS1.2
TLS_RSA_PSK_AES_256_CBC_SHA384 0x00b7 TLS1.2
TLS_RSA_PSK_NULL_SHA384 0x00b9 TLS1.2
TLS_RSA_PSK_CAMELLIA_128_CBC_SHA256 0xc098 TLS1.2
TLS_RSA_PSK_CAMELLIA_256_CBC_SHA384 0xc099 TLS1.2
TLS_DHE_PSK_ARCFOUR_128_SHA1 0x008e TLS1.0
TLS_DHE_PSK_3DES_EDE_CBC_SHA1 0x008f TLS1.0
TLS_DHE_PSK_AES_128_CBC_SHA1 0x0090 TLS1.0
TLS_DHE_PSK_AES_256_CBC_SHA1 0x0091 TLS1.0
TLS_DHE_PSK_AES_128_CBC_SHA256 0x00b2 TLS1.2
TLS_DHE_PSK_AES_128_GCM_SHA256 0x00aa TLS1.2
TLS_DHE_PSK_NULL_SHA1 0x002d TLS1.0
TLS_DHE_PSK_NULL_SHA256 0x00b4 TLS1.2
TLS_DHE_PSK_NULL_SHA384 0x00b5 TLS1.2
TLS_DHE_PSK_AES_256_CBC_SHA384 0x00b3 TLS1.2
TLS_DHE_PSK_AES_256_GCM_SHA384 0x00ab TLS1.2
TLS_DHE_PSK_CAMELLIA_128_CBC_SHA256 0xc096 TLS1.2
TLS_DHE_PSK_CAMELLIA_256_CBC_SHA384 0xc097 TLS1.2
TLS_DHE_PSK_CAMELLIA_128_GCM_SHA256 0xc090 TLS1.2
TLS_DHE_PSK_CAMELLIA_256_GCM_SHA384 0xc091 TLS1.2
TLS_PSK_AES_128_CCM 0xc0a4 TLS1.2
TLS_PSK_AES_256_CCM 0xc0a5 TLS1.2
TLS_DHE_PSK_AES_128_CCM 0xc0a6 TLS1.2
TLS_DHE_PSK_AES_256_CCM 0xc0a7 TLS1.2
TLS_PSK_AES_128_CCM_8 0xc0a8 TLS1.2
TLS_PSK_AES_256_CCM_8 0xc0a9 TLS1.2
TLS_DHE_PSK_AES_128_CCM_8 0xc0aa TLS1.2
TLS_DHE_PSK_AES_256_CCM_8 0xc0ab TLS1.2
TLS_DHE_PSK_CHACHA20_POLY1305 0xccad TLS1.2
TLS_ECDHE_PSK_CHACHA20_POLY1305 0xccac TLS1.2
TLS_RSA_PSK_CHACHA20_POLY1305 0xccae TLS1.2
TLS_PSK_CHACHA20_POLY1305 0xccab TLS1.2
TLS_DH_ANON_ARCFOUR_128_MD5 0x0018 TLS1.0
TLS_DH_ANON_3DES_EDE_CBC_SHA1 0x001b TLS1.0
TLS_DH_ANON_AES_128_CBC_SHA1 0x0034 TLS1.0
TLS_DH_ANON_AES_256_CBC_SHA1 0x003a TLS1.0
TLS_DH_ANON_CAMELLIA_128_CBC_SHA256 0x00bf TLS1.2
TLS_DH_ANON_CAMELLIA_256_CBC_SHA256 0x00c5 TLS1.2
TLS_DH_ANON_CAMELLIA_128_CBC_SHA1 0x0046 TLS1.0
TLS_DH_ANON_CAMELLIA_256_CBC_SHA1 0x0089 TLS1.0
TLS_DH_ANON_AES_128_CBC_SHA256 0x006c TLS1.2
TLS_DH_ANON_AES_256_CBC_SHA256 0x006d TLS1.2
TLS_DH_ANON_AES_128_GCM_SHA256 0x00a6 TLS1.2
TLS_DH_ANON_AES_256_GCM_SHA384 0x00a7 TLS1.2
TLS_DH_ANON_CAMELLIA_128_GCM_SHA256 0xc084 TLS1.2
TLS_DH_ANON_CAMELLIA_256_GCM_SHA384 0xc085 TLS1.2
TLS_ECDH_ANON_NULL_SHA1 0xc015 TLS1.0
TLS_ECDH_ANON_3DES_EDE_CBC_SHA1 0xc017 TLS1.0
TLS_ECDH_ANON_AES_128_CBC_SHA1 0xc018 TLS1.0
TLS_ECDH_ANON_AES_256_CBC_SHA1 0xc019 TLS1.0
TLS_ECDH_ANON_ARCFOUR_128_SHA1 0xc016 TLS1.0
TLS_SRP_SHA_3DES_EDE_CBC_SHA1 0xc01a TLS1.0
TLS_SRP_SHA_AES_128_CBC_SHA1 0xc01d TLS1.0
TLS_SRP_SHA_AES_256_CBC_SHA1 0xc020 TLS1.0
TLS_SRP_SHA_DSS_3DES_EDE_CBC_SHA1 0xc01c TLS1.0
TLS_SRP_SHA_RSA_3DES_EDE_CBC_SHA1 0xc01b TLS1.0
TLS_SRP_SHA_DSS_AES_128_CBC_SHA1 0xc01f TLS1.0
TLS_SRP_SHA_RSA_AES_128_CBC_SHA1 0xc01e TLS1.0
TLS_SRP_SHA_DSS_AES_256_CBC_SHA1 0xc022 TLS1.0
TLS_SRP_SHA_RSA_AES_256_CBC_SHA1 0xc021 TLS1.0

Certificates

  • certificates with RSA keys and SHA-1 or SHA-256 signatures.
  • certificates with EC keys and DSA or SHA-256 signatures

Hashes

  • md5 message digest algorithm
  • sha1 message digest algorithm
  • sha224 message digest algorithm
  • sha256 message digest algorithm
  • sha384 message digest algorithm
  • sha512 message digest algorithm

Additional Notes

Capabilities as given by gnutls-cli

$ gnutls-cli --list
Cipher suites:
TLS_AES_128_GCM_SHA256                              0x13, 0x01  TLS1.3
TLS_AES_256_GCM_SHA384                              0x13, 0x02  TLS1.3
TLS_CHACHA20_POLY1305_SHA256                        0x13, 0x03  TLS1.3
TLS_AES_128_CCM_SHA256                              0x13, 0x04  TLS1.3
TLS_AES_128_CCM_8_SHA256                            0x13, 0x05  TLS1.3
TLS_RSA_NULL_MD5                                    0x00, 0x01  TLS1.0
TLS_RSA_NULL_SHA1                                   0x00, 0x02  TLS1.0
TLS_RSA_NULL_SHA256                                 0x00, 0x3b  TLS1.2
TLS_RSA_ARCFOUR_128_SHA1                            0x00, 0x05  TLS1.0
TLS_RSA_ARCFOUR_128_MD5                             0x00, 0x04  TLS1.0
TLS_RSA_3DES_EDE_CBC_SHA1                           0x00, 0x0a  TLS1.0
TLS_RSA_AES_128_CBC_SHA1                            0x00, 0x2f  TLS1.0
TLS_RSA_AES_256_CBC_SHA1                            0x00, 0x35  TLS1.0
TLS_RSA_CAMELLIA_128_CBC_SHA256                     0x00, 0xba  TLS1.2
TLS_RSA_CAMELLIA_256_CBC_SHA256                     0x00, 0xc0  TLS1.2
TLS_RSA_CAMELLIA_128_CBC_SHA1                       0x00, 0x41  TLS1.0
TLS_RSA_CAMELLIA_256_CBC_SHA1                       0x00, 0x84  TLS1.0
TLS_RSA_AES_128_CBC_SHA256                          0x00, 0x3c  TLS1.2
TLS_RSA_AES_256_CBC_SHA256                          0x00, 0x3d  TLS1.2
TLS_RSA_AES_128_GCM_SHA256                          0x00, 0x9c  TLS1.2
TLS_RSA_AES_256_GCM_SHA384                          0x00, 0x9d  TLS1.2
TLS_RSA_CAMELLIA_128_GCM_SHA256                     0xc0, 0x7a  TLS1.2
TLS_RSA_CAMELLIA_256_GCM_SHA384                     0xc0, 0x7b  TLS1.2
TLS_RSA_AES_128_CCM                                 0xc0, 0x9c  TLS1.2
TLS_RSA_AES_256_CCM                                 0xc0, 0x9d  TLS1.2
TLS_RSA_AES_128_CCM_8                               0xc0, 0xa0  TLS1.2
TLS_RSA_AES_256_CCM_8                               0xc0, 0xa1  TLS1.2
TLS_DHE_DSS_ARCFOUR_128_SHA1                        0x00, 0x66  TLS1.0
TLS_DHE_DSS_3DES_EDE_CBC_SHA1                       0x00, 0x13  TLS1.0
TLS_DHE_DSS_AES_128_CBC_SHA1                        0x00, 0x32  TLS1.0
TLS_DHE_DSS_AES_256_CBC_SHA1                        0x00, 0x38  TLS1.0
TLS_DHE_DSS_CAMELLIA_128_CBC_SHA256                 0x00, 0xbd  TLS1.2
TLS_DHE_DSS_CAMELLIA_256_CBC_SHA256                 0x00, 0xc3  TLS1.2
TLS_DHE_DSS_CAMELLIA_128_CBC_SHA1                   0x00, 0x44  TLS1.0
TLS_DHE_DSS_CAMELLIA_256_CBC_SHA1                   0x00, 0x87  TLS1.0
TLS_DHE_DSS_AES_128_CBC_SHA256                      0x00, 0x40  TLS1.2
TLS_DHE_DSS_AES_256_CBC_SHA256                      0x00, 0x6a  TLS1.2
TLS_DHE_DSS_AES_128_GCM_SHA256                      0x00, 0xa2  TLS1.2
TLS_DHE_DSS_AES_256_GCM_SHA384                      0x00, 0xa3  TLS1.2
TLS_DHE_DSS_CAMELLIA_128_GCM_SHA256                 0xc0, 0x80  TLS1.2
TLS_DHE_DSS_CAMELLIA_256_GCM_SHA384                 0xc0, 0x81  TLS1.2
TLS_DHE_RSA_3DES_EDE_CBC_SHA1                       0x00, 0x16  TLS1.0
TLS_DHE_RSA_AES_128_CBC_SHA1                        0x00, 0x33  TLS1.0
TLS_DHE_RSA_AES_256_CBC_SHA1                        0x00, 0x39  TLS1.0
TLS_DHE_RSA_CAMELLIA_128_CBC_SHA256                 0x00, 0xbe  TLS1.2
TLS_DHE_RSA_CAMELLIA_256_CBC_SHA256                 0x00, 0xc4  TLS1.2
TLS_DHE_RSA_CAMELLIA_128_CBC_SHA1                   0x00, 0x45  TLS1.0
TLS_DHE_RSA_CAMELLIA_256_CBC_SHA1                   0x00, 0x88  TLS1.0
TLS_DHE_RSA_AES_128_CBC_SHA256                      0x00, 0x67  TLS1.2
TLS_DHE_RSA_AES_256_CBC_SHA256                      0x00, 0x6b  TLS1.2
TLS_DHE_RSA_AES_128_GCM_SHA256                      0x00, 0x9e  TLS1.2
TLS_DHE_RSA_AES_256_GCM_SHA384                      0x00, 0x9f  TLS1.2
TLS_DHE_RSA_CAMELLIA_128_GCM_SHA256                 0xc0, 0x7c  TLS1.2
TLS_DHE_RSA_CAMELLIA_256_GCM_SHA384                 0xc0, 0x7d  TLS1.2
TLS_DHE_RSA_CHACHA20_POLY1305                       0xcc, 0xaa  TLS1.2
TLS_DHE_RSA_AES_128_CCM                             0xc0, 0x9e  TLS1.2
TLS_DHE_RSA_AES_256_CCM                             0xc0, 0x9f  TLS1.2
TLS_DHE_RSA_AES_128_CCM_8                           0xc0, 0xa2  TLS1.2
TLS_DHE_RSA_AES_256_CCM_8                           0xc0, 0xa3  TLS1.2
TLS_ECDHE_RSA_NULL_SHA1                             0xc0, 0x10  TLS1.0
TLS_ECDHE_RSA_3DES_EDE_CBC_SHA1                     0xc0, 0x12  TLS1.0
TLS_ECDHE_RSA_AES_128_CBC_SHA1                      0xc0, 0x13  TLS1.0
TLS_ECDHE_RSA_AES_256_CBC_SHA1                      0xc0, 0x14  TLS1.0
TLS_ECDHE_RSA_AES_256_CBC_SHA384                    0xc0, 0x28  TLS1.2
TLS_ECDHE_RSA_ARCFOUR_128_SHA1                      0xc0, 0x11  TLS1.0
TLS_ECDHE_RSA_CAMELLIA_128_CBC_SHA256               0xc0, 0x76  TLS1.2
TLS_ECDHE_RSA_CAMELLIA_256_CBC_SHA384               0xc0, 0x77  TLS1.2
TLS_ECDHE_ECDSA_NULL_SHA1                           0xc0, 0x06  TLS1.0
TLS_ECDHE_ECDSA_3DES_EDE_CBC_SHA1                   0xc0, 0x08  TLS1.0
TLS_ECDHE_ECDSA_AES_128_CBC_SHA1                    0xc0, 0x09  TLS1.0
TLS_ECDHE_ECDSA_AES_256_CBC_SHA1                    0xc0, 0x0a  TLS1.0
TLS_ECDHE_ECDSA_ARCFOUR_128_SHA1                    0xc0, 0x07  TLS1.0
TLS_ECDHE_ECDSA_CAMELLIA_128_CBC_SHA256             0xc0, 0x72  TLS1.2
TLS_ECDHE_ECDSA_CAMELLIA_256_CBC_SHA384             0xc0, 0x73  TLS1.2
TLS_ECDHE_ECDSA_AES_128_CBC_SHA256                  0xc0, 0x23  TLS1.2
TLS_ECDHE_RSA_AES_128_CBC_SHA256                    0xc0, 0x27  TLS1.2
TLS_ECDHE_ECDSA_CAMELLIA_128_GCM_SHA256             0xc0, 0x86  TLS1.2
TLS_ECDHE_ECDSA_CAMELLIA_256_GCM_SHA384             0xc0, 0x87  TLS1.2
TLS_ECDHE_ECDSA_AES_128_GCM_SHA256                  0xc0, 0x2b  TLS1.2
TLS_ECDHE_ECDSA_AES_256_GCM_SHA384                  0xc0, 0x2c  TLS1.2
TLS_ECDHE_RSA_AES_128_GCM_SHA256                    0xc0, 0x2f  TLS1.2
TLS_ECDHE_RSA_AES_256_GCM_SHA384                    0xc0, 0x30  TLS1.2
TLS_ECDHE_ECDSA_AES_256_CBC_SHA384                  0xc0, 0x24  TLS1.2
TLS_ECDHE_RSA_CAMELLIA_128_GCM_SHA256               0xc0, 0x8a  TLS1.2
TLS_ECDHE_RSA_CAMELLIA_256_GCM_SHA384               0xc0, 0x8b  TLS1.2
TLS_ECDHE_RSA_CHACHA20_POLY1305                     0xcc, 0xa8  TLS1.2
TLS_ECDHE_ECDSA_CHACHA20_POLY1305                   0xcc, 0xa9  TLS1.2
TLS_ECDHE_ECDSA_AES_128_CCM                         0xc0, 0xac  TLS1.2
TLS_ECDHE_ECDSA_AES_256_CCM                         0xc0, 0xad  TLS1.2
TLS_ECDHE_ECDSA_AES_128_CCM_8                       0xc0, 0xae  TLS1.2
TLS_ECDHE_ECDSA_AES_256_CCM_8                       0xc0, 0xaf  TLS1.2
TLS_ECDHE_PSK_3DES_EDE_CBC_SHA1                     0xc0, 0x34  TLS1.0
TLS_ECDHE_PSK_AES_128_CBC_SHA1                      0xc0, 0x35  TLS1.0
TLS_ECDHE_PSK_AES_256_CBC_SHA1                      0xc0, 0x36  TLS1.0
TLS_ECDHE_PSK_AES_128_CBC_SHA256                    0xc0, 0x37  TLS1.2
TLS_ECDHE_PSK_AES_256_CBC_SHA384                    0xc0, 0x38  TLS1.2
TLS_ECDHE_PSK_ARCFOUR_128_SHA1                      0xc0, 0x33  TLS1.0
TLS_ECDHE_PSK_NULL_SHA1                             0xc0, 0x39  TLS1.0
TLS_ECDHE_PSK_NULL_SHA256                           0xc0, 0x3a  TLS1.2
TLS_ECDHE_PSK_NULL_SHA384                           0xc0, 0x3b  TLS1.0
TLS_ECDHE_PSK_CAMELLIA_128_CBC_SHA256               0xc0, 0x9a  TLS1.2
TLS_ECDHE_PSK_CAMELLIA_256_CBC_SHA384               0xc0, 0x9b  TLS1.2
TLS_PSK_ARCFOUR_128_SHA1                            0x00, 0x8a  TLS1.0
TLS_PSK_3DES_EDE_CBC_SHA1                           0x00, 0x8b  TLS1.0
TLS_PSK_AES_128_CBC_SHA1                            0x00, 0x8c  TLS1.0
TLS_PSK_AES_256_CBC_SHA1                            0x00, 0x8d  TLS1.0
TLS_PSK_AES_128_CBC_SHA256                          0x00, 0xae  TLS1.2
TLS_PSK_AES_256_GCM_SHA384                          0x00, 0xa9  TLS1.2
TLS_PSK_CAMELLIA_128_GCM_SHA256                     0xc0, 0x8e  TLS1.2
TLS_PSK_CAMELLIA_256_GCM_SHA384                     0xc0, 0x8f  TLS1.2
TLS_PSK_AES_128_GCM_SHA256                          0x00, 0xa8  TLS1.2
TLS_PSK_NULL_SHA1                                   0x00, 0x2c  TLS1.0
TLS_PSK_NULL_SHA256                                 0x00, 0xb0  TLS1.2
TLS_PSK_CAMELLIA_128_CBC_SHA256                     0xc0, 0x94  TLS1.2
TLS_PSK_CAMELLIA_256_CBC_SHA384                     0xc0, 0x95  TLS1.2
TLS_PSK_AES_256_CBC_SHA384                          0x00, 0xaf  TLS1.2
TLS_PSK_NULL_SHA384                                 0x00, 0xb1  TLS1.2
TLS_RSA_PSK_ARCFOUR_128_SHA1                        0x00, 0x92  TLS1.0
TLS_RSA_PSK_3DES_EDE_CBC_SHA1                       0x00, 0x93  TLS1.0
TLS_RSA_PSK_AES_128_CBC_SHA1                        0x00, 0x94  TLS1.0
TLS_RSA_PSK_AES_256_CBC_SHA1                        0x00, 0x95  TLS1.0
TLS_RSA_PSK_CAMELLIA_128_GCM_SHA256                 0xc0, 0x92  TLS1.2
TLS_RSA_PSK_CAMELLIA_256_GCM_SHA384                 0xc0, 0x93  TLS1.2
TLS_RSA_PSK_AES_128_GCM_SHA256                      0x00, 0xac  TLS1.2
TLS_RSA_PSK_AES_128_CBC_SHA256                      0x00, 0xb6  TLS1.2
TLS_RSA_PSK_NULL_SHA1                               0x00, 0x2e  TLS1.0
TLS_RSA_PSK_NULL_SHA256                             0x00, 0xb8  TLS1.2
TLS_RSA_PSK_AES_256_GCM_SHA384                      0x00, 0xad  TLS1.2
TLS_RSA_PSK_AES_256_CBC_SHA384                      0x00, 0xb7  TLS1.2
TLS_RSA_PSK_NULL_SHA384                             0x00, 0xb9  TLS1.2
TLS_RSA_PSK_CAMELLIA_128_CBC_SHA256                 0xc0, 0x98  TLS1.2
TLS_RSA_PSK_CAMELLIA_256_CBC_SHA384                 0xc0, 0x99  TLS1.2
TLS_DHE_PSK_ARCFOUR_128_SHA1                        0x00, 0x8e  TLS1.0
TLS_DHE_PSK_3DES_EDE_CBC_SHA1                       0x00, 0x8f  TLS1.0
TLS_DHE_PSK_AES_128_CBC_SHA1                        0x00, 0x90  TLS1.0
TLS_DHE_PSK_AES_256_CBC_SHA1                        0x00, 0x91  TLS1.0
TLS_DHE_PSK_AES_128_CBC_SHA256                      0x00, 0xb2  TLS1.2
TLS_DHE_PSK_AES_128_GCM_SHA256                      0x00, 0xaa  TLS1.2
TLS_DHE_PSK_NULL_SHA1                               0x00, 0x2d  TLS1.0
TLS_DHE_PSK_NULL_SHA256                             0x00, 0xb4  TLS1.2
TLS_DHE_PSK_NULL_SHA384                             0x00, 0xb5  TLS1.2
TLS_DHE_PSK_AES_256_CBC_SHA384                      0x00, 0xb3  TLS1.2
TLS_DHE_PSK_AES_256_GCM_SHA384                      0x00, 0xab  TLS1.2
TLS_DHE_PSK_CAMELLIA_128_CBC_SHA256                 0xc0, 0x96  TLS1.2
TLS_DHE_PSK_CAMELLIA_256_CBC_SHA384                 0xc0, 0x97  TLS1.2
TLS_DHE_PSK_CAMELLIA_128_GCM_SHA256                 0xc0, 0x90  TLS1.2
TLS_DHE_PSK_CAMELLIA_256_GCM_SHA384                 0xc0, 0x91  TLS1.2
TLS_PSK_AES_128_CCM                                 0xc0, 0xa4  TLS1.2
TLS_PSK_AES_256_CCM                                 0xc0, 0xa5  TLS1.2
TLS_DHE_PSK_AES_128_CCM                             0xc0, 0xa6  TLS1.2
TLS_DHE_PSK_AES_256_CCM                             0xc0, 0xa7  TLS1.2
TLS_PSK_AES_128_CCM_8                               0xc0, 0xa8  TLS1.2
TLS_PSK_AES_256_CCM_8                               0xc0, 0xa9  TLS1.2
TLS_DHE_PSK_AES_128_CCM_8                           0xc0, 0xaa  TLS1.2
TLS_DHE_PSK_AES_256_CCM_8                           0xc0, 0xab  TLS1.2
TLS_DHE_PSK_CHACHA20_POLY1305                       0xcc, 0xad  TLS1.2
TLS_ECDHE_PSK_CHACHA20_POLY1305                     0xcc, 0xac  TLS1.2
TLS_RSA_PSK_CHACHA20_POLY1305                       0xcc, 0xae  TLS1.2
TLS_PSK_CHACHA20_POLY1305                           0xcc, 0xab  TLS1.2
TLS_DH_ANON_ARCFOUR_128_MD5                         0x00, 0x18  TLS1.0
TLS_DH_ANON_3DES_EDE_CBC_SHA1                       0x00, 0x1b  TLS1.0
TLS_DH_ANON_AES_128_CBC_SHA1                        0x00, 0x34  TLS1.0
TLS_DH_ANON_AES_256_CBC_SHA1                        0x00, 0x3a  TLS1.0
TLS_DH_ANON_CAMELLIA_128_CBC_SHA256                 0x00, 0xbf  TLS1.2
TLS_DH_ANON_CAMELLIA_256_CBC_SHA256                 0x00, 0xc5  TLS1.2
TLS_DH_ANON_CAMELLIA_128_CBC_SHA1                   0x00, 0x46  TLS1.0
TLS_DH_ANON_CAMELLIA_256_CBC_SHA1                   0x00, 0x89  TLS1.0
TLS_DH_ANON_AES_128_CBC_SHA256                      0x00, 0x6c  TLS1.2
TLS_DH_ANON_AES_256_CBC_SHA256                      0x00, 0x6d  TLS1.2
TLS_DH_ANON_AES_128_GCM_SHA256                      0x00, 0xa6  TLS1.2
TLS_DH_ANON_AES_256_GCM_SHA384                      0x00, 0xa7  TLS1.2
TLS_DH_ANON_CAMELLIA_128_GCM_SHA256                 0xc0, 0x84  TLS1.2
TLS_DH_ANON_CAMELLIA_256_GCM_SHA384                 0xc0, 0x85  TLS1.2
TLS_ECDH_ANON_NULL_SHA1                             0xc0, 0x15  TLS1.0
TLS_ECDH_ANON_3DES_EDE_CBC_SHA1                     0xc0, 0x17  TLS1.0
TLS_ECDH_ANON_AES_128_CBC_SHA1                      0xc0, 0x18  TLS1.0
TLS_ECDH_ANON_AES_256_CBC_SHA1                      0xc0, 0x19  TLS1.0
TLS_ECDH_ANON_ARCFOUR_128_SHA1                      0xc0, 0x16  TLS1.0
TLS_SRP_SHA_3DES_EDE_CBC_SHA1                       0xc0, 0x1a  TLS1.0
TLS_SRP_SHA_AES_128_CBC_SHA1                        0xc0, 0x1d  TLS1.0
TLS_SRP_SHA_AES_256_CBC_SHA1                        0xc0, 0x20  TLS1.0
TLS_SRP_SHA_DSS_3DES_EDE_CBC_SHA1                   0xc0, 0x1c  TLS1.0
TLS_SRP_SHA_RSA_3DES_EDE_CBC_SHA1                   0xc0, 0x1b  TLS1.0
TLS_SRP_SHA_DSS_AES_128_CBC_SHA1                    0xc0, 0x1f  TLS1.0
TLS_SRP_SHA_RSA_AES_128_CBC_SHA1                    0xc0, 0x1e  TLS1.0
TLS_SRP_SHA_DSS_AES_256_CBC_SHA1                    0xc0, 0x22  TLS1.0
TLS_SRP_SHA_RSA_AES_256_CBC_SHA1                    0xc0, 0x21  TLS1.0

Certificate types: CTYPE-X.509
Protocols: VERS-SSL3.0, VERS-TLS1.0, VERS-TLS1.1, VERS-TLS1.2, VERS-TLS1.3, VERS-DTLS0.9, VERS-DTLS1.0, VERS-DTLS1.2
Ciphers: AES-256-CBC, AES-192-CBC, AES-128-CBC, AES-128-GCM, AES-256-GCM, AES-128-CCM, AES-256-CCM, AES-128-CCM-8, AES-256-CCM-8, ARCFOUR-128, ESTREAM-SALSA20-256, SALSA20-256, CAMELLIA-256-CBC, CAMELLIA-192-CBC, CAMELLIA-128-CBC, CHACHA20-POLY1305, CAMELLIA-128-GCM, CAMELLIA-256-GCM, GOST28147-TC26Z-CFB, GOST28147-CPA-CFB, GOST28147-CPB-CFB, GOST28147-CPC-CFB, GOST28147-CPD-CFB, 3DES-CBC, DES-CBC, RC2-40, NULL
MACs: SHA1, SHA256, SHA384, SHA512, SHA224, UMAC-96, UMAC-128, AEAD, MD5, GOSTR341194, STREEBOG-256, STREEBOG-512
Digests: SHA1, SHA256, SHA384, SHA512, SHA224, MD5, GOSTR341194, STREEBOG-256, STREEBOG-512
Key exchange algorithms: ECDHE-RSA, ECDHE-ECDSA, RSA, DHE-RSA, DHE-DSS, PSK, RSA-PSK, DHE-PSK, ECDHE-PSK, SRP-DSS, SRP-RSA, SRP, ANON-DH, ANON-ECDH, RSA-EXPORT
Compression: COMP-NULL
Groups: GROUP-SECP256R1, GROUP-SECP384R1, GROUP-SECP521R1, GROUP-X25519, GROUP-FFDHE2048, GROUP-FFDHE3072, GROUP-FFDHE4096, GROUP-FFDHE6144, GROUP-FFDHE8192
Public Key Systems: RSA, RSA-PSS, RSA, DSA, GOST R 34.10-2012-512, GOST R 34.10-2012-256, GOST R 34.10-2001, EC/ECDSA, EdDSA (Ed25519), DH, ECDH (X25519)
PK-signatures: SIGN-RSA-SHA256, SIGN-RSA-SHA384, SIGN-RSA-SHA512, SIGN-RSA-PSS-SHA256, SIGN-RSA-PSS-RSAE-SHA256, SIGN-RSA-PSS-SHA384, SIGN-RSA-PSS-RSAE-SHA384, SIGN-RSA-PSS-SHA512, SIGN-RSA-PSS-RSAE-SHA512, SIGN-EdDSA-Ed25519, SIGN-ECDSA-SHA256, SIGN-ECDSA-SHA384, SIGN-ECDSA-SHA512, SIGN-ECDSA-SECP256R1-SHA256, SIGN-ECDSA-SECP384R1-SHA384, SIGN-ECDSA-SECP521R1-SHA512, SIGN-ECDSA-SHA3-224, SIGN-ECDSA-SHA3-256, SIGN-ECDSA-SHA3-384, SIGN-ECDSA-SHA3-512, SIGN-RSA-SHA3-224, SIGN-RSA-SHA3-256, SIGN-RSA-SHA3-384, SIGN-RSA-SHA3-512, SIGN-DSA-SHA3-224, SIGN-DSA-SHA3-256, SIGN-DSA-SHA3-384, SIGN-DSA-SHA3-512, SIGN-RSA-RAW, SIGN-RSA-SHA1, SIGN-RSA-SHA1, SIGN-RSA-SHA224, SIGN-RSA-RMD160, SIGN-DSA-SHA1, SIGN-DSA-SHA1, SIGN-DSA-SHA224, SIGN-DSA-SHA256, SIGN-RSA-MD5, SIGN-RSA-MD5, SIGN-RSA-MD2, SIGN-ECDSA-SHA1, SIGN-ECDSA-SHA224, SIGN-GOSTR341012-512, SIGN-GOSTR341012-256, SIGN-GOSTR341001, SIGN-DSA-SHA384, SIGN-DSA-SHA512

Comments