external/mailinabox
1
0
Fork 0
mirror of https://github.com/mail-in-a-box/mailinabox.git synced 2024-12-27 08:07:04 +00:00
Code Issues Releases Wiki Activity
03b3456799
mailinabox/tests/tls_results.txt

401 lines
33 KiB
Plaintext
Raw Normal View History

record current TLS settings from my box
2015-05-20 22:02:01 +00:00
PORT 25
-------
* Deflate Compression:
OK - Compression disabled
* Session Renegotiation:
Client-initiated Renegotiations: VULNERABLE - Server honors client-initiated renegotiations
Secure Renegotiation: OK - Supported
* OpenSSL Heartbleed:
OK - Not vulnerable to Heartbleed
* Session Resumption:
With Session IDs: OK - Supported (5 successful, 0 failed, 0 errors, 5 total attempts).
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
With TLS Session Tickets: OK - Supported
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
* SSLV2 Cipher Suites:
Server rejected all cipher suites.
* TLSV1_2 Cipher Suites:
Preferred:
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
ECDHE-RSA-AES256-GCM-SHA384 ECDH-521 bits 256 bits 250 2.0.0 Ok
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
Accepted:
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
ECDHE-RSA-AES256-SHA384 ECDH-521 bits 256 bits 250 2.0.0 Ok
ECDHE-RSA-AES256-SHA ECDH-521 bits 256 bits 250 2.0.0 Ok
ECDHE-RSA-AES256-GCM-SHA384 ECDH-521 bits 256 bits 250 2.0.0 Ok
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
DHE-RSA-CAMELLIA256-SHA DH-2048 bits 256 bits 250 2.0.0 Ok
DHE-RSA-AES256-SHA256 DH-2048 bits 256 bits 250 2.0.0 Ok
DHE-RSA-AES256-SHA DH-2048 bits 256 bits 250 2.0.0 Ok
DHE-RSA-AES256-GCM-SHA384 DH-2048 bits 256 bits 250 2.0.0 Ok
CAMELLIA256-SHA - 256 bits 250 2.0.0 Ok
AES256-SHA256 - 256 bits 250 2.0.0 Ok
AES256-SHA - 256 bits 250 2.0.0 Ok
AES256-GCM-SHA384 - 256 bits 250 2.0.0 Ok
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
ECDHE-RSA-AES128-SHA256 ECDH-521 bits 128 bits 250 2.0.0 Ok
ECDHE-RSA-AES128-SHA ECDH-521 bits 128 bits 250 2.0.0 Ok
ECDHE-RSA-AES128-GCM-SHA256 ECDH-521 bits 128 bits 250 2.0.0 Ok
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
DHE-RSA-SEED-SHA DH-2048 bits 128 bits 250 2.0.0 Ok
DHE-RSA-CAMELLIA128-SHA DH-2048 bits 128 bits 250 2.0.0 Ok
DHE-RSA-AES128-SHA256 DH-2048 bits 128 bits 250 2.0.0 Ok
DHE-RSA-AES128-SHA DH-2048 bits 128 bits 250 2.0.0 Ok
DHE-RSA-AES128-GCM-SHA256 DH-2048 bits 128 bits 250 2.0.0 Ok
SEED-SHA - 128 bits 250 2.0.0 Ok
CAMELLIA128-SHA - 128 bits 250 2.0.0 Ok
AES128-SHA256 - 128 bits 250 2.0.0 Ok
AES128-SHA - 128 bits 250 2.0.0 Ok
AES128-GCM-SHA256 - 128 bits 250 2.0.0 Ok
* TLSV1_1 Cipher Suites:
Preferred:
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
ECDHE-RSA-AES256-SHA ECDH-521 bits 256 bits 250 2.0.0 Ok
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
Accepted:
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
ECDHE-RSA-AES256-SHA ECDH-521 bits 256 bits 250 2.0.0 Ok
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
DHE-RSA-CAMELLIA256-SHA DH-2048 bits 256 bits 250 2.0.0 Ok
DHE-RSA-AES256-SHA DH-2048 bits 256 bits 250 2.0.0 Ok
CAMELLIA256-SHA - 256 bits 250 2.0.0 Ok
AES256-SHA - 256 bits 250 2.0.0 Ok
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
ECDHE-RSA-AES128-SHA ECDH-521 bits 128 bits 250 2.0.0 Ok
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
DHE-RSA-SEED-SHA DH-2048 bits 128 bits 250 2.0.0 Ok
DHE-RSA-CAMELLIA128-SHA DH-2048 bits 128 bits 250 2.0.0 Ok
DHE-RSA-AES128-SHA DH-2048 bits 128 bits 250 2.0.0 Ok
SEED-SHA - 128 bits 250 2.0.0 Ok
CAMELLIA128-SHA - 128 bits 250 2.0.0 Ok
AES128-SHA - 128 bits 250 2.0.0 Ok
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
* SSLV3 Cipher Suites:
Server rejected all cipher suites.
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
drop SSLv3, RC4 ciphers from SMTP port 25 Per http://googleappsupdates.blogspot.ro/2016/05/disabling-support-for-sslv3-and-rc4-for.html, Google is about to do the same. fixes #611
2016-06-12 12:50:31 +00:00
* TLSV1 Cipher Suites:
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
Preferred:
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
ECDHE-RSA-AES256-SHA ECDH-521 bits 256 bits 250 2.0.0 Ok
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
Accepted:
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
ECDHE-RSA-AES256-SHA ECDH-521 bits 256 bits 250 2.0.0 Ok
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
DHE-RSA-CAMELLIA256-SHA DH-2048 bits 256 bits 250 2.0.0 Ok
DHE-RSA-AES256-SHA DH-2048 bits 256 bits 250 2.0.0 Ok
CAMELLIA256-SHA - 256 bits 250 2.0.0 Ok
AES256-SHA - 256 bits 250 2.0.0 Ok
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
ECDHE-RSA-AES128-SHA ECDH-521 bits 128 bits 250 2.0.0 Ok
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
DHE-RSA-SEED-SHA DH-2048 bits 128 bits 250 2.0.0 Ok
DHE-RSA-CAMELLIA128-SHA DH-2048 bits 128 bits 250 2.0.0 Ok
DHE-RSA-AES128-SHA DH-2048 bits 128 bits 250 2.0.0 Ok
SEED-SHA - 128 bits 250 2.0.0 Ok
CAMELLIA128-SHA - 128 bits 250 2.0.0 Ok
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
AES128-SHA - 128 bits 250 2.0.0 Ok
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
update TLS test to record changes in the ciphers we offer on the open ports
2017-10-03 16:01:10 +00:00
Should Not Offer: (none -- good)
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
Could Also Offer: AES128-CCM, AES128-CCM8, AES256-CCM, AES256-CCM8, CAMELLIA128-SHA256, CAMELLIA256-SHA256, DHE-DSS-AES128-GCM-SHA256, DHE-DSS-AES128-SHA, DHE-DSS-AES128-SHA256, DHE-DSS-AES256-GCM-SHA384, DHE-DSS-AES256-SHA, DHE-DSS-AES256-SHA256, DHE-DSS-CAMELLIA128-SHA, DHE-DSS-CAMELLIA128-SHA256, DHE-DSS-CAMELLIA256-SHA, DHE-DSS-CAMELLIA256-SHA256, DHE-DSS-SEED-SHA, DHE-RSA-AES128-CCM, DHE-RSA-AES128-CCM8, DHE-RSA-AES256-CCM, DHE-RSA-AES256-CCM8, DHE-RSA-CAMELLIA128-SHA256, DHE-RSA-CAMELLIA256-SHA256, DHE-RSA-CHACHA20-POLY1305, ECDHE-ECDSA-AES128-CCM, ECDHE-ECDSA-AES128-CCM8, ECDHE-ECDSA-AES128-GCM-SHA256, ECDHE-ECDSA-AES128-SHA, ECDHE-ECDSA-AES128-SHA256, ECDHE-ECDSA-AES256-CCM, ECDHE-ECDSA-AES256-CCM8, ECDHE-ECDSA-AES256-GCM-SHA384, ECDHE-ECDSA-AES256-SHA, ECDHE-ECDSA-AES256-SHA384, ECDHE-ECDSA-CAMELLIA128-SHA256, ECDHE-ECDSA-CAMELLIA256-SHA384, ECDHE-ECDSA-CHACHA20-POLY1305, ECDHE-RSA-CAMELLIA128-SHA256, ECDHE-RSA-CAMELLIA256-SHA384, ECDHE-RSA-CHACHA20-POLY1305
Supported Clients: Yahoo Slurp/Jan 2015, OpenSSL/1.0.2, BingPreview/Jan 2015, OpenSSL/1.0.1l, YandexBot/Jan 2015, Android/4.4.2, Safari/6/iOS 6.0.1, Safari/8/OS X 10.10, Safari/7/OS X 10.9, Safari/7/iOS 7.1, IE/11/Win 8.1, Safari/8/iOS 8.1.2, IE Mobile/11/Win Phone 8.1, IE/11/Win 7, Baidu/Jan 2015, Firefox/31.3.0 ESR/Win 7, Android/5.0.0, Chrome/42/OS X, Java/8u31, Googlebot/Feb 2015, Firefox/37/OS X, Android/4.3, Android/4.2.2, Safari/5.1.9/OS X 10.6.8, Android/4.0.4, Android/4.1.1, Safari/6.0.4/OS X 10.8.4, IE Mobile/10/Win Phone 8.0, IE/8-10/Win 7, IE/7/Vista, OpenSSL/0.9.8y, Java/7u25, Android/2.3.7, Java/6u45
compare tls ciphers against Mozilla's recommendations
2015-05-20 23:41:04 +00:00
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
PORT 587
--------
* Deflate Compression:
OK - Compression disabled
* Session Renegotiation:
Client-initiated Renegotiations: VULNERABLE - Server honors client-initiated renegotiations
Secure Renegotiation: OK - Supported
* OpenSSL Heartbleed:
OK - Not vulnerable to Heartbleed
* Session Resumption:
With Session IDs: OK - Supported (5 successful, 0 failed, 0 errors, 5 total attempts).
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
With TLS Session Tickets: OK - Supported
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
* SSLV2 Cipher Suites:
Server rejected all cipher suites.
* TLSV1_2 Cipher Suites:
Preferred:
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
ECDHE-RSA-AES256-GCM-SHA384 ECDH-521 bits 256 bits 250 2.0.0 Ok
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
Accepted:
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
ECDHE-RSA-AES256-SHA384 ECDH-521 bits 256 bits 250 2.0.0 Ok
ECDHE-RSA-AES256-SHA ECDH-521 bits 256 bits 250 2.0.0 Ok
ECDHE-RSA-AES256-GCM-SHA384 ECDH-521 bits 256 bits 250 2.0.0 Ok
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
DHE-RSA-CAMELLIA256-SHA DH-2048 bits 256 bits 250 2.0.0 Ok
DHE-RSA-AES256-SHA256 DH-2048 bits 256 bits 250 2.0.0 Ok
DHE-RSA-AES256-SHA DH-2048 bits 256 bits 250 2.0.0 Ok
DHE-RSA-AES256-GCM-SHA384 DH-2048 bits 256 bits 250 2.0.0 Ok
CAMELLIA256-SHA - 256 bits 250 2.0.0 Ok
AES256-SHA256 - 256 bits 250 2.0.0 Ok
AES256-SHA - 256 bits 250 2.0.0 Ok
AES256-GCM-SHA384 - 256 bits 250 2.0.0 Ok
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
ECDHE-RSA-AES128-SHA256 ECDH-521 bits 128 bits 250 2.0.0 Ok
ECDHE-RSA-AES128-SHA ECDH-521 bits 128 bits 250 2.0.0 Ok
ECDHE-RSA-AES128-GCM-SHA256 ECDH-521 bits 128 bits 250 2.0.0 Ok
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
DHE-RSA-SEED-SHA DH-2048 bits 128 bits 250 2.0.0 Ok
DHE-RSA-CAMELLIA128-SHA DH-2048 bits 128 bits 250 2.0.0 Ok
DHE-RSA-AES128-SHA256 DH-2048 bits 128 bits 250 2.0.0 Ok
DHE-RSA-AES128-SHA DH-2048 bits 128 bits 250 2.0.0 Ok
DHE-RSA-AES128-GCM-SHA256 DH-2048 bits 128 bits 250 2.0.0 Ok
SEED-SHA - 128 bits 250 2.0.0 Ok
CAMELLIA128-SHA - 128 bits 250 2.0.0 Ok
AES128-SHA256 - 128 bits 250 2.0.0 Ok
AES128-SHA - 128 bits 250 2.0.0 Ok
AES128-GCM-SHA256 - 128 bits 250 2.0.0 Ok
* TLSV1_1 Cipher Suites:
Preferred:
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
ECDHE-RSA-AES256-SHA ECDH-521 bits 256 bits 250 2.0.0 Ok
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
Accepted:
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
ECDHE-RSA-AES256-SHA ECDH-521 bits 256 bits 250 2.0.0 Ok
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
DHE-RSA-CAMELLIA256-SHA DH-2048 bits 256 bits 250 2.0.0 Ok
DHE-RSA-AES256-SHA DH-2048 bits 256 bits 250 2.0.0 Ok
CAMELLIA256-SHA - 256 bits 250 2.0.0 Ok
AES256-SHA - 256 bits 250 2.0.0 Ok
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
ECDHE-RSA-AES128-SHA ECDH-521 bits 128 bits 250 2.0.0 Ok
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
DHE-RSA-SEED-SHA DH-2048 bits 128 bits 250 2.0.0 Ok
DHE-RSA-CAMELLIA128-SHA DH-2048 bits 128 bits 250 2.0.0 Ok
DHE-RSA-AES128-SHA DH-2048 bits 128 bits 250 2.0.0 Ok
SEED-SHA - 128 bits 250 2.0.0 Ok
CAMELLIA128-SHA - 128 bits 250 2.0.0 Ok
AES128-SHA - 128 bits 250 2.0.0 Ok
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
* SSLV3 Cipher Suites:
Server rejected all cipher suites.
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
* TLSV1 Cipher Suites:
Preferred:
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
ECDHE-RSA-AES256-SHA ECDH-521 bits 256 bits 250 2.0.0 Ok
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
Accepted:
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
ECDHE-RSA-AES256-SHA ECDH-521 bits 256 bits 250 2.0.0 Ok
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
DHE-RSA-CAMELLIA256-SHA DH-2048 bits 256 bits 250 2.0.0 Ok
DHE-RSA-AES256-SHA DH-2048 bits 256 bits 250 2.0.0 Ok
CAMELLIA256-SHA - 256 bits 250 2.0.0 Ok
AES256-SHA - 256 bits 250 2.0.0 Ok
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
ECDHE-RSA-AES128-SHA ECDH-521 bits 128 bits 250 2.0.0 Ok
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
DHE-RSA-SEED-SHA DH-2048 bits 128 bits 250 2.0.0 Ok
DHE-RSA-CAMELLIA128-SHA DH-2048 bits 128 bits 250 2.0.0 Ok
DHE-RSA-AES128-SHA DH-2048 bits 128 bits 250 2.0.0 Ok
SEED-SHA - 128 bits 250 2.0.0 Ok
CAMELLIA128-SHA - 128 bits 250 2.0.0 Ok
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
AES128-SHA - 128 bits 250 2.0.0 Ok
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
update TLS test to record changes in the ciphers we offer on the open ports
2017-10-03 16:01:10 +00:00
Should Not Offer: AES128-GCM-SHA256, AES128-SHA, AES128-SHA256, AES256-GCM-SHA384, AES256-SHA, AES256-SHA256, CAMELLIA128-SHA, CAMELLIA256-SHA, DHE-RSA-AES128-GCM-SHA256, DHE-RSA-AES128-SHA, DHE-RSA-AES128-SHA256, DHE-RSA-AES256-GCM-SHA384, DHE-RSA-AES256-SHA, DHE-RSA-AES256-SHA256, DHE-RSA-CAMELLIA128-SHA, DHE-RSA-CAMELLIA256-SHA, DHE-RSA-SEED-SHA, ECDHE-RSA-AES128-SHA, ECDHE-RSA-AES256-SHA, SEED-SHA
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
Could Also Offer: ECDHE-ECDSA-AES128-GCM-SHA256, ECDHE-ECDSA-AES128-SHA256, ECDHE-ECDSA-AES256-GCM-SHA384, ECDHE-ECDSA-AES256-SHA384, ECDHE-ECDSA-CHACHA20-POLY1305, ECDHE-RSA-CHACHA20-POLY1305
Supported Clients: Yahoo Slurp/Jan 2015, OpenSSL/1.0.2, BingPreview/Jan 2015, OpenSSL/1.0.1l, YandexBot/Jan 2015, Android/4.4.2, Safari/6/iOS 6.0.1, Safari/8/OS X 10.10, Safari/7/OS X 10.9, Safari/7/iOS 7.1, IE/11/Win 8.1, Safari/8/iOS 8.1.2, IE Mobile/11/Win Phone 8.1, IE/11/Win 7, Baidu/Jan 2015, Firefox/31.3.0 ESR/Win 7, Android/5.0.0, Chrome/42/OS X, Java/8u31, Googlebot/Feb 2015, Firefox/37/OS X, Android/4.3, Android/4.2.2, Safari/5.1.9/OS X 10.6.8, Android/4.0.4, Android/4.1.1, Safari/6.0.4/OS X 10.8.4, IE Mobile/10/Win Phone 8.0, IE/8-10/Win 7, IE/7/Vista, OpenSSL/0.9.8y, Java/7u25, Android/2.3.7, Java/6u45
compare tls ciphers against Mozilla's recommendations
2015-05-20 23:41:04 +00:00
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
PORT 443
--------
* Deflate Compression:
OK - Compression disabled
* Session Renegotiation:
Client-initiated Renegotiations: OK - Rejected
Secure Renegotiation: OK - Supported
drop SSLv3, RC4 ciphers from SMTP port 25 Per http://googleappsupdates.blogspot.ro/2016/05/disabling-support-for-sslv3-and-rc4-for.html, Google is about to do the same. fixes #611
2016-06-12 12:50:31 +00:00
* HTTP Strict Transport Security:
update TLS test to record changes in the ciphers we offer on the open ports
2017-10-03 16:01:10 +00:00
OK - HSTS header received: max-age=15768000
drop SSLv3, RC4 ciphers from SMTP port 25 Per http://googleappsupdates.blogspot.ro/2016/05/disabling-support-for-sslv3-and-rc4-for.html, Google is about to do the same. fixes #611
2016-06-12 12:50:31 +00:00
revert f25801e/#1233 - use Mozilla intermediate ciphers for IMAP/POP not modern ciphers fixes #1300
2017-12-24 19:41:41 +00:00
* Session Resumption:
With Session IDs: OK - Supported (5 successful, 0 failed, 0 errors, 5 total attempts).
With TLS Session Tickets: OK - Supported
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
* OpenSSL Heartbleed:
OK - Not vulnerable to Heartbleed
Unhandled exception when processing --chrome_sha1:
exceptions.TypeError - Incorrect padding
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
* SSLV2 Cipher Suites:
Server rejected all cipher suites.
* TLSV1_2 Cipher Suites:
Preferred:
ECDHE-RSA-AES128-GCM-SHA256 ECDH-256 bits 128 bits HTTP 200 OK
Accepted:
ECDHE-RSA-AES256-SHA384 ECDH-256 bits 256 bits HTTP 200 OK
ECDHE-RSA-AES256-SHA ECDH-256 bits 256 bits HTTP 200 OK
ECDHE-RSA-AES256-GCM-SHA384 ECDH-256 bits 256 bits HTTP 200 OK
DHE-RSA-AES256-SHA256 DH-2048 bits 256 bits HTTP 200 OK
DHE-RSA-AES256-SHA DH-2048 bits 256 bits HTTP 200 OK
DHE-RSA-AES256-GCM-SHA384 DH-2048 bits 256 bits HTTP 200 OK
update TLS test to record changes in the ciphers we offer on the open ports
2017-10-03 16:01:10 +00:00
AES256-SHA256 - 256 bits HTTP 200 OK
AES256-SHA - 256 bits HTTP 200 OK
AES256-GCM-SHA384 - 256 bits HTTP 200 OK
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
ECDHE-RSA-AES128-SHA256 ECDH-256 bits 128 bits HTTP 200 OK
ECDHE-RSA-AES128-SHA ECDH-256 bits 128 bits HTTP 200 OK
ECDHE-RSA-AES128-GCM-SHA256 ECDH-256 bits 128 bits HTTP 200 OK
DHE-RSA-AES128-SHA256 DH-2048 bits 128 bits HTTP 200 OK
DHE-RSA-AES128-SHA DH-2048 bits 128 bits HTTP 200 OK
DHE-RSA-AES128-GCM-SHA256 DH-2048 bits 128 bits HTTP 200 OK
update TLS test to record changes in the ciphers we offer on the open ports
2017-10-03 16:01:10 +00:00
AES128-SHA256 - 128 bits HTTP 200 OK
AES128-SHA - 128 bits HTTP 200 OK
AES128-GCM-SHA256 - 128 bits HTTP 200 OK
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
* TLSV1_1 Cipher Suites:
Preferred:
ECDHE-RSA-AES128-SHA ECDH-256 bits 128 bits HTTP 200 OK
Accepted:
ECDHE-RSA-AES256-SHA ECDH-256 bits 256 bits HTTP 200 OK
DHE-RSA-AES256-SHA DH-2048 bits 256 bits HTTP 200 OK
update TLS test to record changes in the ciphers we offer on the open ports
2017-10-03 16:01:10 +00:00
AES256-SHA - 256 bits HTTP 200 OK
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
ECDHE-RSA-AES128-SHA ECDH-256 bits 128 bits HTTP 200 OK
DHE-RSA-AES128-SHA DH-2048 bits 128 bits HTTP 200 OK
update TLS test to record changes in the ciphers we offer on the open ports
2017-10-03 16:01:10 +00:00
AES128-SHA - 128 bits HTTP 200 OK
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
* SSLV3 Cipher Suites:
Server rejected all cipher suites.
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
* TLSV1 Cipher Suites:
Preferred:
ECDHE-RSA-AES128-SHA ECDH-256 bits 128 bits HTTP 200 OK
Accepted:
ECDHE-RSA-AES256-SHA ECDH-256 bits 256 bits HTTP 200 OK
DHE-RSA-AES256-SHA DH-2048 bits 256 bits HTTP 200 OK
update TLS test to record changes in the ciphers we offer on the open ports
2017-10-03 16:01:10 +00:00
AES256-SHA - 256 bits HTTP 200 OK
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
ECDHE-RSA-AES128-SHA ECDH-256 bits 128 bits HTTP 200 OK
DHE-RSA-AES128-SHA DH-2048 bits 128 bits HTTP 200 OK
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
AES128-SHA - 128 bits HTTP 200 OK
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
compare tls ciphers against Mozilla's recommendations
2015-05-20 23:41:04 +00:00
Should Not Offer: (none -- good)
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
Could Also Offer: ECDHE-ECDSA-AES128-GCM-SHA256, ECDHE-ECDSA-AES128-SHA, ECDHE-ECDSA-AES128-SHA256, ECDHE-ECDSA-AES256-GCM-SHA384, ECDHE-ECDSA-AES256-SHA, ECDHE-ECDSA-AES256-SHA384, ECDHE-ECDSA-CHACHA20-POLY1305, ECDHE-RSA-CHACHA20-POLY1305
Supported Clients: Yahoo Slurp/Jan 2015, OpenSSL/1.0.2, YandexBot/Jan 2015, BingPreview/Jan 2015, OpenSSL/1.0.1l, Android/4.4.2, Safari/6/iOS 6.0.1, Safari/8/OS X 10.10, Safari/7/OS X 10.9, Safari/7/iOS 7.1, IE/11/Win 8.1, Safari/8/iOS 8.1.2, IE Mobile/11/Win Phone 8.1, IE/11/Win 7, Android/5.0.0, Chrome/42/OS X, Java/8u31, Googlebot/Feb 2015, Firefox/31.3.0 ESR/Win 7, Firefox/37/OS X, Android/4.3, Android/4.2.2, Baidu/Jan 2015, Safari/5.1.9/OS X 10.6.8, Android/4.0.4, Android/4.1.1, Safari/6.0.4/OS X 10.8.4, IE Mobile/10/Win Phone 8.0, IE/8-10/Win 7, IE/7/Vista, OpenSSL/0.9.8y, Java/7u25, Android/2.3.7, Java/6u45
compare tls ciphers against Mozilla's recommendations
2015-05-20 23:41:04 +00:00
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
PORT 993
--------
* Deflate Compression:
OK - Compression disabled
Unhandled exception when processing --reneg:
_nassl.OpenSSLError - error:140940F5:SSL routines:ssl3_read_bytes:unexpected record
* OpenSSL Heartbleed:
OK - Not vulnerable to Heartbleed
* Session Resumption:
With Session IDs: NOT SUPPORTED (0 successful, 5 failed, 0 errors, 5 total attempts).
With TLS Session Tickets: NOT SUPPORTED - TLS ticket assigned but not accepted.
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
* SSLV2 Cipher Suites:
Server rejected all cipher suites.
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
* TLSV1_2 Cipher Suites:
Preferred:
revert f25801e/#1233 - use Mozilla intermediate ciphers for IMAP/POP not modern ciphers fixes #1300
2017-12-24 19:41:41 +00:00
ECDHE-RSA-AES128-GCM-SHA256 ECDH-384 bits 128 bits
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
Accepted:
update TLS test to record changes in the ciphers we offer on the open ports
2017-10-03 16:01:10 +00:00
ECDHE-RSA-AES256-SHA384 ECDH-384 bits 256 bits
revert f25801e/#1233 - use Mozilla intermediate ciphers for IMAP/POP not modern ciphers fixes #1300
2017-12-24 19:41:41 +00:00
ECDHE-RSA-AES256-SHA ECDH-384 bits 256 bits
update TLS test to record changes in the ciphers we offer on the open ports
2017-10-03 16:01:10 +00:00
ECDHE-RSA-AES256-GCM-SHA384 ECDH-384 bits 256 bits
revert f25801e/#1233 - use Mozilla intermediate ciphers for IMAP/POP not modern ciphers fixes #1300
2017-12-24 19:41:41 +00:00
DHE-RSA-AES256-SHA256 DH-2048 bits 256 bits
DHE-RSA-AES256-SHA DH-2048 bits 256 bits
DHE-RSA-AES256-GCM-SHA384 DH-2048 bits 256 bits
AES256-SHA256 - 256 bits
AES256-SHA - 256 bits
AES256-GCM-SHA384 - 256 bits
update TLS test to record changes in the ciphers we offer on the open ports
2017-10-03 16:01:10 +00:00
ECDHE-RSA-AES128-SHA256 ECDH-384 bits 128 bits
revert f25801e/#1233 - use Mozilla intermediate ciphers for IMAP/POP not modern ciphers fixes #1300
2017-12-24 19:41:41 +00:00
ECDHE-RSA-AES128-SHA ECDH-384 bits 128 bits
update TLS test to record changes in the ciphers we offer on the open ports
2017-10-03 16:01:10 +00:00
ECDHE-RSA-AES128-GCM-SHA256 ECDH-384 bits 128 bits
revert f25801e/#1233 - use Mozilla intermediate ciphers for IMAP/POP not modern ciphers fixes #1300
2017-12-24 19:41:41 +00:00
DHE-RSA-AES128-SHA256 DH-2048 bits 128 bits
DHE-RSA-AES128-SHA DH-2048 bits 128 bits
DHE-RSA-AES128-GCM-SHA256 DH-2048 bits 128 bits
AES128-SHA256 - 128 bits
AES128-SHA - 128 bits
AES128-GCM-SHA256 - 128 bits
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
* TLSV1_1 Cipher Suites:
revert f25801e/#1233 - use Mozilla intermediate ciphers for IMAP/POP not modern ciphers fixes #1300
2017-12-24 19:41:41 +00:00
Preferred:
ECDHE-RSA-AES128-SHA ECDH-384 bits 128 bits
Accepted:
ECDHE-RSA-AES256-SHA ECDH-384 bits 256 bits
DHE-RSA-AES256-SHA DH-2048 bits 256 bits
AES256-SHA - 256 bits
ECDHE-RSA-AES128-SHA ECDH-384 bits 128 bits
DHE-RSA-AES128-SHA DH-2048 bits 128 bits
AES128-SHA - 128 bits
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
* SSLV3 Cipher Suites:
Server rejected all cipher suites.
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
* TLSV1 Cipher Suites:
revert f25801e/#1233 - use Mozilla intermediate ciphers for IMAP/POP not modern ciphers fixes #1300
2017-12-24 19:41:41 +00:00
Preferred:
ECDHE-RSA-AES128-SHA ECDH-384 bits 128 bits
Accepted:
ECDHE-RSA-AES256-SHA ECDH-384 bits 256 bits
DHE-RSA-AES256-SHA DH-2048 bits 256 bits
AES256-SHA - 256 bits
ECDHE-RSA-AES128-SHA ECDH-384 bits 128 bits
DHE-RSA-AES128-SHA DH-2048 bits 128 bits
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
AES128-SHA - 128 bits
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
Should Not Offer: AES128-GCM-SHA256, AES128-SHA, AES128-SHA256, AES256-GCM-SHA384, AES256-SHA, AES256-SHA256, DHE-RSA-AES128-GCM-SHA256, DHE-RSA-AES128-SHA, DHE-RSA-AES128-SHA256, DHE-RSA-AES256-GCM-SHA384, DHE-RSA-AES256-SHA, DHE-RSA-AES256-SHA256, ECDHE-RSA-AES128-SHA, ECDHE-RSA-AES256-SHA
Could Also Offer: ECDHE-ECDSA-AES128-GCM-SHA256, ECDHE-ECDSA-AES128-SHA256, ECDHE-ECDSA-AES256-GCM-SHA384, ECDHE-ECDSA-AES256-SHA384, ECDHE-ECDSA-CHACHA20-POLY1305, ECDHE-RSA-CHACHA20-POLY1305
Supported Clients: Yahoo Slurp/Jan 2015, OpenSSL/1.0.2, YandexBot/Jan 2015, BingPreview/Jan 2015, OpenSSL/1.0.1l, Android/4.4.2, Safari/6/iOS 6.0.1, Safari/8/OS X 10.10, Safari/7/OS X 10.9, Safari/7/iOS 7.1, IE/11/Win 8.1, Safari/8/iOS 8.1.2, IE Mobile/11/Win Phone 8.1, IE/11/Win 7, Android/5.0.0, Chrome/42/OS X, Java/8u31, Googlebot/Feb 2015, Firefox/31.3.0 ESR/Win 7, Firefox/37/OS X, Android/4.3, Android/4.2.2, Baidu/Jan 2015, Safari/5.1.9/OS X 10.6.8, Android/4.0.4, Android/4.1.1, Safari/6.0.4/OS X 10.8.4, IE Mobile/10/Win Phone 8.0, IE/8-10/Win 7, IE/7/Vista, OpenSSL/0.9.8y, Java/7u25, Android/2.3.7, Java/6u45
compare tls ciphers against Mozilla's recommendations
2015-05-20 23:41:04 +00:00
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
PORT 995
--------
* Deflate Compression:
OK - Compression disabled
Unhandled exception when processing --reneg:
_nassl.OpenSSLError - error:140940F5:SSL routines:ssl3_read_bytes:unexpected record
* OpenSSL Heartbleed:
OK - Not vulnerable to Heartbleed
* Session Resumption:
With Session IDs: NOT SUPPORTED (0 successful, 5 failed, 0 errors, 5 total attempts).
With TLS Session Tickets: NOT SUPPORTED - TLS ticket assigned but not accepted.
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
* SSLV2 Cipher Suites:
Server rejected all cipher suites.
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
* TLSV1_2 Cipher Suites:
Preferred:
revert f25801e/#1233 - use Mozilla intermediate ciphers for IMAP/POP not modern ciphers fixes #1300
2017-12-24 19:41:41 +00:00
ECDHE-RSA-AES128-GCM-SHA256 ECDH-384 bits 128 bits
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
Accepted:
update TLS test to record changes in the ciphers we offer on the open ports
2017-10-03 16:01:10 +00:00
ECDHE-RSA-AES256-SHA384 ECDH-384 bits 256 bits
revert f25801e/#1233 - use Mozilla intermediate ciphers for IMAP/POP not modern ciphers fixes #1300
2017-12-24 19:41:41 +00:00
ECDHE-RSA-AES256-SHA ECDH-384 bits 256 bits
update TLS test to record changes in the ciphers we offer on the open ports
2017-10-03 16:01:10 +00:00
ECDHE-RSA-AES256-GCM-SHA384 ECDH-384 bits 256 bits
revert f25801e/#1233 - use Mozilla intermediate ciphers for IMAP/POP not modern ciphers fixes #1300
2017-12-24 19:41:41 +00:00
DHE-RSA-AES256-SHA256 DH-2048 bits 256 bits
DHE-RSA-AES256-SHA DH-2048 bits 256 bits
DHE-RSA-AES256-GCM-SHA384 DH-2048 bits 256 bits
AES256-SHA256 - 256 bits
AES256-SHA - 256 bits
AES256-GCM-SHA384 - 256 bits
update TLS test to record changes in the ciphers we offer on the open ports
2017-10-03 16:01:10 +00:00
ECDHE-RSA-AES128-SHA256 ECDH-384 bits 128 bits
revert f25801e/#1233 - use Mozilla intermediate ciphers for IMAP/POP not modern ciphers fixes #1300
2017-12-24 19:41:41 +00:00
ECDHE-RSA-AES128-SHA ECDH-384 bits 128 bits
update TLS test to record changes in the ciphers we offer on the open ports
2017-10-03 16:01:10 +00:00
ECDHE-RSA-AES128-GCM-SHA256 ECDH-384 bits 128 bits
revert f25801e/#1233 - use Mozilla intermediate ciphers for IMAP/POP not modern ciphers fixes #1300
2017-12-24 19:41:41 +00:00
DHE-RSA-AES128-SHA256 DH-2048 bits 128 bits
DHE-RSA-AES128-SHA DH-2048 bits 128 bits
DHE-RSA-AES128-GCM-SHA256 DH-2048 bits 128 bits
AES128-SHA256 - 128 bits
AES128-SHA - 128 bits
AES128-GCM-SHA256 - 128 bits
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
* TLSV1_1 Cipher Suites:
revert f25801e/#1233 - use Mozilla intermediate ciphers for IMAP/POP not modern ciphers fixes #1300
2017-12-24 19:41:41 +00:00
Preferred:
ECDHE-RSA-AES128-SHA ECDH-384 bits 128 bits
Accepted:
ECDHE-RSA-AES256-SHA ECDH-384 bits 256 bits
DHE-RSA-AES256-SHA DH-2048 bits 256 bits
AES256-SHA - 256 bits
ECDHE-RSA-AES128-SHA ECDH-384 bits 128 bits
DHE-RSA-AES128-SHA DH-2048 bits 128 bits
AES128-SHA - 128 bits
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
* SSLV3 Cipher Suites:
Server rejected all cipher suites.
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
* TLSV1 Cipher Suites:
revert f25801e/#1233 - use Mozilla intermediate ciphers for IMAP/POP not modern ciphers fixes #1300
2017-12-24 19:41:41 +00:00
Preferred:
ECDHE-RSA-AES128-SHA ECDH-384 bits 128 bits
Accepted:
ECDHE-RSA-AES256-SHA ECDH-384 bits 256 bits
DHE-RSA-AES256-SHA DH-2048 bits 256 bits
AES256-SHA - 256 bits
ECDHE-RSA-AES128-SHA ECDH-384 bits 128 bits
DHE-RSA-AES128-SHA DH-2048 bits 128 bits
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
AES128-SHA - 128 bits
record current TLS settings from my box
2015-05-20 22:02:01 +00:00
update list of tls ciphers supported
2019-01-09 12:33:21 +00:00
Should Not Offer: AES128-GCM-SHA256, AES128-SHA, AES128-SHA256, AES256-GCM-SHA384, AES256-SHA, AES256-SHA256, DHE-RSA-AES128-GCM-SHA256, DHE-RSA-AES128-SHA, DHE-RSA-AES128-SHA256, DHE-RSA-AES256-GCM-SHA384, DHE-RSA-AES256-SHA, DHE-RSA-AES256-SHA256, ECDHE-RSA-AES128-SHA, ECDHE-RSA-AES256-SHA
Could Also Offer: ECDHE-ECDSA-AES128-GCM-SHA256, ECDHE-ECDSA-AES128-SHA256, ECDHE-ECDSA-AES256-GCM-SHA384, ECDHE-ECDSA-AES256-SHA384, ECDHE-ECDSA-CHACHA20-POLY1305, ECDHE-RSA-CHACHA20-POLY1305
Supported Clients: Yahoo Slurp/Jan 2015, OpenSSL/1.0.2, YandexBot/Jan 2015, BingPreview/Jan 2015, OpenSSL/1.0.1l, Android/4.4.2, Safari/6/iOS 6.0.1, Safari/8/OS X 10.10, Safari/7/OS X 10.9, Safari/7/iOS 7.1, IE/11/Win 8.1, Safari/8/iOS 8.1.2, IE Mobile/11/Win Phone 8.1, IE/11/Win 7, Android/5.0.0, Chrome/42/OS X, Java/8u31, Googlebot/Feb 2015, Firefox/31.3.0 ESR/Win 7, Firefox/37/OS X, Android/4.3, Android/4.2.2, Baidu/Jan 2015, Safari/5.1.9/OS X 10.6.8, Android/4.0.4, Android/4.1.1, Safari/6.0.4/OS X 10.8.4, IE Mobile/10/Win Phone 8.0, IE/8-10/Win 7, IE/7/Vista, OpenSSL/0.9.8y, Java/7u25, Android/2.3.7, Java/6u45
compare tls ciphers against Mozilla's recommendations
2015-05-20 23:41:04 +00:00
Reference in New Issue Copy Permalink