Thu, 22 Jan 2015 13:21:57 +0100
Incorporate requested changes from Mozilla in review:
https://bugzilla.mozilla.org/show_bug.cgi?id=1123480#c6
michael@0 | 1 | # This Source Code Form is subject to the terms of the Mozilla Public |
michael@0 | 2 | # License, v. 2.0. If a copy of the MPL was not distributed with this |
michael@0 | 3 | # file, You can obtain one at http://mozilla.org/MPL/2.0/. |
michael@0 | 4 | |
michael@0 | 5 | nss openssl iis |
michael@0 | 6 | |
michael@0 | 7 | # |
michael@0 | 8 | # SSL v3.0 cipher suites. |
michael@0 | 9 | # |
michael@0 | 10 | SSL3_RSA_WITH_NULL_MD5 NULL-MD5 i |
michael@0 | 11 | SSL3_RSA_WITH_NULL_SHA NULL-SHA z |
michael@0 | 12 | SSL3_RSA_EXPORT_WITH_RC4_40_MD5 EXP-RC4-MD5 f |
michael@0 | 13 | SSL3_RSA_WITH_RC4_128_MD5 RC4-MD5 c |
michael@0 | 14 | SSL3_RSA_WITH_RC4_128_SHA RC4-SHA n |
michael@0 | 15 | SSL3_RSA_EXPORT_WITH_RC2_CBC_40_MD5 EXP-RC2-CBC-MD5 g |
michael@0 | 16 | SSL3_RSA_WITH_IDEA_CBC_SHA IDEA-CBC-SHA |
michael@0 | 17 | SSL3_RSA_EXPORT_WITH_DES40_CBC_SHA EXP-DES-CBC-SHA |
michael@0 | 18 | SSL3_RSA_WITH_DES_CBC_SHA DES-CBC-SHA e |
michael@0 | 19 | SSL3_RSA_WITH_3DES_EDE_CBC_SHA DES-CBC3-SHA d |
michael@0 | 20 | |
michael@0 | 21 | SSL3_DH_DSS_EXPORT_WITH_DES40_CBC_SHA Not_implemented. |
michael@0 | 22 | SSL3_DH_DSS_WITH_DES_CBC_SHA Not_implemented. |
michael@0 | 23 | SSL3_DH_DSS_WITH_3DES_EDE_CBC_SHA Not_implemented. |
michael@0 | 24 | SSL3_DH_RSA_EXPORT_WITH_DES40_CBC_SHA Not_implemented. |
michael@0 | 25 | SSL3_DH_RSA_WITH_DES_CBC_SHA Not_implemented. |
michael@0 | 26 | SSL3_DH_RSA_WITH_3DES_EDE_CBC_SHA Not_implemented. |
michael@0 | 27 | SSL3_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA EXP-EDH-DSS-DES-CBC-SHA |
michael@0 | 28 | SSL3_DHE_DSS_WITH_DES_CBC_SHA EDH-DSS-CBC-SHA s |
michael@0 | 29 | SSL3_DHE_DSS_WITH_3DES_EDE_CBC_SHA EDH-DSS-DES-CBC3-SHA q |
michael@0 | 30 | SSL3_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA EXP-EDH-RSA-DES-CBC-SHA |
michael@0 | 31 | SSL3_DHE_RSA_WITH_DES_CBC_SHA EDH-RSA-DES-CBC-SHA |
michael@0 | 32 | SSL3_DHE_RSA_WITH_3DES_EDE_CBC_SHA EDH-RSA-DES-CBC3-SHA |
michael@0 | 33 | |
michael@0 | 34 | SSL3_DH_anon_EXPORT_WITH_RC4_40_MD5 EXP-ADH-RC4-MD5 |
michael@0 | 35 | SSL3_DH_anon_WITH_RC4_128_MD5 ADH-RC4-MD5 |
michael@0 | 36 | SSL3_DH_anon_EXPORT_WITH_DES40_CBC_SHA EXP-ADH-DES-CBC-SHA |
michael@0 | 37 | SSL3_DH_anon_WITH_DES_CBC_SHA ADH-DES-CBC-SHA |
michael@0 | 38 | SSL3_DH_anon_WITH_3DES_EDE_CBC_SHA ADH-DES-CBC3-SHA |
michael@0 | 39 | |
michael@0 | 40 | SSL3_FORTEZZA_KEA_WITH_NULL_SHA Not_implemented. |
michael@0 | 41 | SSL3_FORTEZZA_KEA_WITH_FORTEZZA_CBC_SHA Not_implemented. |
michael@0 | 42 | SSL3_FORTEZZA_KEA_WITH_RC4_128_SHA Not_implemented. |
michael@0 | 43 | |
michael@0 | 44 | # |
michael@0 | 45 | # Next four added to have ciphers below for SSL3 protocol |
michael@0 | 46 | # |
michael@0 | 47 | SSL3_RSA_WITH_AES_128_CBC_SHA AES128-SHA |
michael@0 | 48 | SSL3_RSA_WITH_AES_256_CBC_SHA AES256-SHA |
michael@0 | 49 | |
michael@0 | 50 | SSL3_RSA_EXPORT_WITH_DES_CBC_SHA EXP1024-DES-CBC-SHA l |
michael@0 | 51 | SSL3_RSA_EXPORT_WITH_RC4_56_SHA EXP1024-RC4-SHA m |
michael@0 | 52 | |
michael@0 | 53 | # |
michael@0 | 54 | #TLS v1.0 cipher suites. |
michael@0 | 55 | # |
michael@0 | 56 | TLS_RSA_WITH_NULL_MD5 NULL-MD5 |
michael@0 | 57 | TLS_RSA_WITH_NULL_SHA NULL-SHA |
michael@0 | 58 | TLS_RSA_EXPORT_WITH_RC4_40_MD5 EXP-RC4-MD5 |
michael@0 | 59 | TLS_RSA_WITH_RC4_128_MD5 RC4-MD5 |
michael@0 | 60 | TLS_RSA_WITH_RC4_128_SHA RC4-SHA |
michael@0 | 61 | TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5 EXP-RC2-CBC-MD5 |
michael@0 | 62 | TLS_RSA_WITH_IDEA_CBC_SHA IDEA-CBC-SHA |
michael@0 | 63 | TLS_RSA_EXPORT_WITH_DES40_CBC_SHA EXP-DES-CBC-SHA |
michael@0 | 64 | TLS_RSA_WITH_DES_CBC_SHA DES-CBC-SHA |
michael@0 | 65 | TLS_RSA_WITH_3DES_EDE_CBC_SHA DES-CBC3-SHA |
michael@0 | 66 | |
michael@0 | 67 | TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA Not_implemented. |
michael@0 | 68 | TLS_DH_DSS_WITH_DES_CBC_SHA Not_implemented. |
michael@0 | 69 | TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA Not_implemented. |
michael@0 | 70 | TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA Not_implemented. |
michael@0 | 71 | TLS_DH_RSA_WITH_DES_CBC_SHA Not_implemented. |
michael@0 | 72 | TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA Not_implemented. |
michael@0 | 73 | TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA EXP-EDH-DSS-DES-CBC-SHA |
michael@0 | 74 | TLS_DHE_DSS_WITH_DES_CBC_SHA EDH-DSS-CBC-SHA |
michael@0 | 75 | TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA EDH-DSS-DES-CBC3-SHA |
michael@0 | 76 | TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA EXP-EDH-RSA-DES-CBC-SHA |
michael@0 | 77 | TLS_DHE_RSA_WITH_DES_CBC_SHA EDH-RSA-DES-CBC-SHA |
michael@0 | 78 | TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA EDH-RSA-DES-CBC3-SHA |
michael@0 | 79 | |
michael@0 | 80 | TLS_DH_anon_EXPORT_WITH_RC4_40_MD5 EXP-ADH-RC4-MD5 |
michael@0 | 81 | TLS_DH_anon_WITH_RC4_128_MD5 ADH-RC4-MD5 |
michael@0 | 82 | TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA EXP-ADH-DES-CBC-SHA |
michael@0 | 83 | TLS_DH_anon_WITH_DES_CBC_SHA ADH-DES-CBC-SHA |
michael@0 | 84 | TLS_DH_anon_WITH_3DES_EDE_CBC_SHA ADH-DES-CBC3-SHA |
michael@0 | 85 | |
michael@0 | 86 | # |
michael@0 | 87 | #AES ciphersuites from RFC3268, extending TLS v1.0 |
michael@0 | 88 | # |
michael@0 | 89 | |
michael@0 | 90 | TLS_RSA_WITH_AES_128_CBC_SHA AES128-SHA |
michael@0 | 91 | TLS_RSA_WITH_AES_256_CBC_SHA AES256-SHA |
michael@0 | 92 | |
michael@0 | 93 | TLS_DH_DSS_WITH_AES_128_CBC_SHA DH-DSS-AES128-SHA |
michael@0 | 94 | TLS_DH_DSS_WITH_AES_256_CBC_SHA DH-DSS-AES256-SHA |
michael@0 | 95 | TLS_DH_RSA_WITH_AES_128_CBC_SHA DH-RSA-AES128-SHA |
michael@0 | 96 | TLS_DH_RSA_WITH_AES_256_CBC_SHA DH-RSA-AES256-SHA |
michael@0 | 97 | |
michael@0 | 98 | TLS_DHE_DSS_WITH_AES_128_CBC_SHA DHE-DSS-AES128-SHA |
michael@0 | 99 | TLS_DHE_DSS_WITH_AES_256_CBC_SHA DHE-DSS-AES256-SHA |
michael@0 | 100 | TLS_DHE_RSA_WITH_AES_128_CBC_SHA DHE-RSA-AES128-SHA |
michael@0 | 101 | TLS_DHE_RSA_WITH_AES_256_CBC_SHA DHE-RSA-AES256-SHA |
michael@0 | 102 | |
michael@0 | 103 | TLS_DH_anon_WITH_AES_128_CBC_SHA ADH-AES128-SHA |
michael@0 | 104 | TLS_DH_anon_WITH_AES_256_CBC_SHA ADH-AES256-SHA |
michael@0 | 105 | |
michael@0 | 106 | # |
michael@0 | 107 | #Additional Export 1024 and other cipher suites |
michael@0 | 108 | # |
michael@0 | 109 | #Note: these ciphers can also be used in SSL v3. |
michael@0 | 110 | # |
michael@0 | 111 | TLS_RSA_EXPORT_WITH_DES_CBC_SHA EXP1024-DES-CBC-SHA |
michael@0 | 112 | TLS_RSA_EXPORT_WITH_RC4_56_SHA EXP1024-RC4-SHA |
michael@0 | 113 | TLS_DHE_DSS_EXPORT_WITH_DES_CBC_SHA EXP1024-DHE-DSS-DES-CBC-SHA |
michael@0 | 114 | TLS_DHE_DSS_EXPORT_WITH_RC4_56_SHA EXP1024-DHE-DSS-RC4-SHA |
michael@0 | 115 | TLS_DHE_DSS_WITH_RC4_128_SHA DHE-DSS-RC4-SHA |
michael@0 | 116 | |
michael@0 | 117 | # |
michael@0 | 118 | #SSL v2.0 cipher suites. |
michael@0 | 119 | # |
michael@0 | 120 | SSL2_RC4_128_WITH_MD5 RC4-MD5 |
michael@0 | 121 | SSL2_RC4_128_EXPORT40_WITH_MD5 EXP-RC4-MD5 |
michael@0 | 122 | SSL2_RC2_128_CBC_WITH_MD5 RC2-MD5 |
michael@0 | 123 | SSL2_RC2_128_CBC_EXPORT40_WITH_MD5 EXP-RC2-MD5 |
michael@0 | 124 | SSL2_IDEA_128_CBC_WITH_MD5 IDEA-CBC-MD5 |
michael@0 | 125 | SSL2_DES_64_CBC_WITH_MD5 DES-CBC-MD5 |
michael@0 | 126 | SSL2_DES_192_EDE3_CBC_WITH_MD5 DES-CBC3-MD5 |
michael@0 | 127 | |
michael@0 | 128 | |
michael@0 | 129 | # |
michael@0 | 130 | # FIPS cipher list |
michael@0 | 131 | # |
michael@0 | 132 | TLS_RSA_FIPS_WITH_3DES_EDE_CBC_SHA Not_implemented |
michael@0 | 133 | TLS_RSA_FIPS_WITH_DES_CBC_SHA Not_implemented |
michael@0 | 134 | SSL3_RSA_FIPS_WITH_3DES_EDE_CBC_SHA Not_implemented |
michael@0 | 135 | SSL3_RSA_FIPS_WITH_DES_CBC_SHA Not_implemented |