PHP, curl und TLS 1.2 als Minimum
TLS 1.2 ist im Payment-Bereich weiter auf dem Vormarsch, immer mehr Zahlungsanbieter setzen TLS 1.2 als Minimumversion fest. Das Payment Card Industry Security Standards Council (PCI SSC) hat die Frist von 2016 auf 2018 verschoben. PayPal wird am 30. Juni 2018 TLS 1.0 und 1.1 abschalten. Paysafecard wird selbiges bereits im Februar 2018 tun.
Wer einen Zahlungsanbieter eingebunden hat, und deren API nutzt, sollte baldmöglichst prüfen ob seine Systeme TLS 1.2 beherrschen. Für halbwegs aktuelle Systeme sollte das gelten, Ubuntu 14.04 geht so gerade noch. Doch seht selbst.
Folgendes Script testet die TLS-Einstellungen von PHP (curl) mit Hilfe der Webseite https://www.howsmyssl.com:
<?php
$ch = curl_init('https://www.howsmyssl.com/a/check');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$data = curl_exec($ch);
curl_close($ch);
$json = json_decode($data);
var_dump($json);
Die Ergebnisse:
Ubuntu 13.10: TLS 1.1 „Bad“
Ubuntu 14.04: TLS 1.2 „Bad“
Ubuntu 16.04: TLS 1.2 „Probably Okay“
Ein weiterer Grund, immer up2date zu bleiben. Ubuntu 13.10 erhält seit Jahren keine Security-Updates mehr, sollte also eh nirgends mehr eingesetzt werden (besonders nicht in Payment-Systemen).
===================================
Hier die ausführlichen Ausgaben der 3 untersuchten Ubuntu-Versionen:
Ausgabe Ubuntu 13.10.:
object(stdClass)#1 (10) {
["given_cipher_suites"]=>
array(51) {
[0]=>
string(34) "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"
[1]=>
string(36) "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA"
[2]=>
string(36) "TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA"
[3]=>
string(36) "TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA"
[4]=>
string(32) "TLS_DHE_RSA_WITH_AES_256_CBC_SHA"
[5]=>
string(32) "TLS_DHE_DSS_WITH_AES_256_CBC_SHA"
[6]=>
string(37) "TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA"
[7]=>
string(37) "TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA"
[8]=>
string(33) "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA"
[9]=>
string(35) "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA"
[10]=>
string(28) "TLS_RSA_WITH_AES_256_CBC_SHA"
[11]=>
string(33) "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA"
[12]=>
string(35) "TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA"
[13]=>
string(37) "TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA"
[14]=>
string(37) "TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA"
[15]=>
string(37) "TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA"
[16]=>
string(33) "TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA"
[17]=>
string(33) "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA"
[18]=>
string(34) "TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA"
[19]=>
string(36) "TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA"
[20]=>
string(29) "TLS_RSA_WITH_3DES_EDE_CBC_SHA"
[21]=>
string(34) "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"
[22]=>
string(36) "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA"
[23]=>
string(36) "TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA"
[24]=>
string(36) "TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA"
[25]=>
string(32) "TLS_DHE_RSA_WITH_AES_128_CBC_SHA"
[26]=>
string(32) "TLS_DHE_DSS_WITH_AES_128_CBC_SHA"
[27]=>
string(29) "TLS_DHE_RSA_WITH_SEED_CBC_SHA"
[28]=>
string(29) "TLS_DHE_DSS_WITH_SEED_CBC_SHA"
[29]=>
string(37) "TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA"
[30]=>
string(37) "TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA"
[31]=>
string(33) "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA"
[32]=>
string(35) "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA"
[33]=>
string(28) "TLS_RSA_WITH_AES_128_CBC_SHA"
[34]=>
string(25) "TLS_RSA_WITH_SEED_CBC_SHA"
[35]=>
string(33) "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA"
[36]=>
string(30) "TLS_ECDHE_RSA_WITH_RC4_128_SHA"
[37]=>
string(32) "TLS_ECDHE_ECDSA_WITH_RC4_128_SHA"
[38]=>
string(29) "TLS_ECDH_RSA_WITH_RC4_128_SHA"
[39]=>
string(31) "TLS_ECDH_ECDSA_WITH_RC4_128_SHA"
[40]=>
string(24) "TLS_RSA_WITH_RC4_128_SHA"
[41]=>
string(24) "TLS_RSA_WITH_RC4_128_MD5"
[42]=>
string(28) "TLS_DHE_RSA_WITH_DES_CBC_SHA"
[43]=>
string(28) "TLS_DHE_DSS_WITH_DES_CBC_SHA"
[44]=>
string(24) "TLS_RSA_WITH_DES_CBC_SHA"
[45]=>
string(37) "TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA"
[46]=>
string(37) "TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA"
[47]=>
string(33) "TLS_RSA_EXPORT_WITH_DES40_CBC_SHA"
[48]=>
string(34) "TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5"
[49]=>
string(30) "TLS_RSA_EXPORT_WITH_RC4_40_MD5"
[50]=>
string(33) "TLS_EMPTY_RENEGOTIATION_INFO_SCSV"
}
["ephemeral_keys_supported"]=>
bool(true)
["session_ticket_supported"]=>
bool(false)
["tls_compression_supported"]=>
bool(false)
["unknown_cipher_suite_supported"]=>
bool(false)
["beast_vuln"]=>
bool(false)
["able_to_detect_n_minus_one_splitting"]=>
bool(false)
["insecure_cipher_suites"]=>
object(stdClass)#2 (23) {
["TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA"]=>
array(1) {
[0]=>
string(49) "uses keys smaller than 128 bits in its encryption"
}
["TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA"]=>
array(1) {
[0]=>
string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
}
["TLS_DHE_DSS_WITH_DES_CBC_SHA"]=>
array(1) {
[0]=>
string(49) "uses keys smaller than 128 bits in its encryption"
}
["TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA"]=>
array(1) {
[0]=>
string(49) "uses keys smaller than 128 bits in its encryption"
}
["TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA"]=>
array(1) {
[0]=>
string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
}
["TLS_DHE_RSA_WITH_DES_CBC_SHA"]=>
array(1) {
[0]=>
string(49) "uses keys smaller than 128 bits in its encryption"
}
["TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA"]=>
array(1) {
[0]=>
string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
}
["TLS_ECDHE_ECDSA_WITH_RC4_128_SHA"]=>
array(1) {
[0]=>
string(48) "uses RC4 which has insecure biases in its output"
}
["TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA"]=>
array(1) {
[0]=>
string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
}
["TLS_ECDHE_RSA_WITH_RC4_128_SHA"]=>
array(1) {
[0]=>
string(48) "uses RC4 which has insecure biases in its output"
}
["TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA"]=>
array(1) {
[0]=>
string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
}
["TLS_ECDH_ECDSA_WITH_RC4_128_SHA"]=>
array(1) {
[0]=>
string(48) "uses RC4 which has insecure biases in its output"
}
["TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA"]=>
array(1) {
[0]=>
string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
}
["TLS_ECDH_RSA_WITH_RC4_128_SHA"]=>
array(1) {
[0]=>
string(48) "uses RC4 which has insecure biases in its output"
}
["TLS_RSA_EXPORT_WITH_DES40_CBC_SHA"]=>
array(1) {
[0]=>
string(49) "uses keys smaller than 128 bits in its encryption"
}
["TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5"]=>
array(1) {
[0]=>
string(49) "uses keys smaller than 128 bits in its encryption"
}
["TLS_RSA_EXPORT_WITH_RC4_40_MD5"]=>
array(2) {
[0]=>
string(49) "uses keys smaller than 128 bits in its encryption"
[1]=>
string(48) "uses RC4 which has insecure biases in its output"
}
["TLS_RSA_WITH_3DES_EDE_CBC_SHA"]=>
array(1) {
[0]=>
string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
}
["TLS_RSA_WITH_DES_CBC_SHA"]=>
array(1) {
[0]=>
string(49) "uses keys smaller than 128 bits in its encryption"
}
["TLS_RSA_WITH_RC4_128_MD5"]=>
array(1) {
[0]=>
string(48) "uses RC4 which has insecure biases in its output"
}
["TLS_RSA_WITH_RC4_128_SHA"]=>
array(1) {
[0]=>
string(48) "uses RC4 which has insecure biases in its output"
}
["TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA"]=>
array(1) {
[0]=>
string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
}
["TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA"]=>
array(1) {
[0]=>
string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
}
}
["tls_version"]=>
string(7) "TLS 1.1"
["rating"]=>
string(3) "Bad"
}
Ausgabe Ubuntu 14.04:
object(stdClass)#1 (10) {
["given_cipher_suites"]=>
array(59) {
[0]=>
string(37) "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
[1]=>
string(39) "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"
[2]=>
string(37) "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"
[3]=>
string(39) "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384"
[4]=>
string(34) "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"
[5]=>
string(36) "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA"
[6]=>
string(35) "TLS_DHE_DSS_WITH_AES_256_GCM_SHA384"
[7]=>
string(35) "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384"
[8]=>
string(35) "TLS_DHE_RSA_WITH_AES_256_CBC_SHA256"
[9]=>
string(35) "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256"
[10]=>
string(32) "TLS_DHE_RSA_WITH_AES_256_CBC_SHA"
[11]=>
string(32) "TLS_DHE_DSS_WITH_AES_256_CBC_SHA"
[12]=>
string(37) "TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA"
[13]=>
string(37) "TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA"
[14]=>
string(36) "TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384"
[15]=>
string(38) "TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384"
[16]=>
string(36) "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384"
[17]=>
string(38) "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384"
[18]=>
string(33) "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA"
[19]=>
string(35) "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA"
[20]=>
string(31) "TLS_RSA_WITH_AES_256_GCM_SHA384"
[21]=>
string(31) "TLS_RSA_WITH_AES_256_CBC_SHA256"
[22]=>
string(28) "TLS_RSA_WITH_AES_256_CBC_SHA"
[23]=>
string(33) "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA"
[24]=>
string(35) "TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA"
[25]=>
string(37) "TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA"
[26]=>
string(33) "TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA"
[27]=>
string(33) "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA"
[28]=>
string(34) "TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA"
[29]=>
string(36) "TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA"
[30]=>
string(29) "TLS_RSA_WITH_3DES_EDE_CBC_SHA"
[31]=>
string(37) "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
[32]=>
string(39) "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"
[33]=>
string(37) "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256"
[34]=>
string(39) "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256"
[35]=>
string(34) "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"
[36]=>
string(36) "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA"
[37]=>
string(35) "TLS_DHE_DSS_WITH_AES_128_GCM_SHA256"
[38]=>
string(35) "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256"
[39]=>
string(35) "TLS_DHE_RSA_WITH_AES_128_CBC_SHA256"
[40]=>
string(35) "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256"
[41]=>
string(32) "TLS_DHE_RSA_WITH_AES_128_CBC_SHA"
[42]=>
string(32) "TLS_DHE_DSS_WITH_AES_128_CBC_SHA"
[43]=>
string(29) "TLS_DHE_RSA_WITH_SEED_CBC_SHA"
[44]=>
string(29) "TLS_DHE_DSS_WITH_SEED_CBC_SHA"
[45]=>
string(37) "TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA"
[46]=>
string(37) "TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA"
[47]=>
string(36) "TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256"
[48]=>
string(38) "TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256"
[49]=>
string(36) "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256"
[50]=>
string(38) "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256"
[51]=>
string(33) "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA"
[52]=>
string(35) "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA"
[53]=>
string(31) "TLS_RSA_WITH_AES_128_GCM_SHA256"
[54]=>
string(31) "TLS_RSA_WITH_AES_128_CBC_SHA256"
[55]=>
string(28) "TLS_RSA_WITH_AES_128_CBC_SHA"
[56]=>
string(25) "TLS_RSA_WITH_SEED_CBC_SHA"
[57]=>
string(33) "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA"
[58]=>
string(33) "TLS_EMPTY_RENEGOTIATION_INFO_SCSV"
}
["ephemeral_keys_supported"]=>
bool(true)
["session_ticket_supported"]=>
bool(false)
["tls_compression_supported"]=>
bool(false)
["unknown_cipher_suite_supported"]=>
bool(false)
["beast_vuln"]=>
bool(false)
["able_to_detect_n_minus_one_splitting"]=>
bool(false)
["insecure_cipher_suites"]=>
object(stdClass)#2 (7) {
["TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA"]=>
array(1) {
[0]=>
string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
}
["TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA"]=>
array(1) {
[0]=>
string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
}
["TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA"]=>
array(1) {
[0]=>
string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
}
["TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA"]=>
array(1) {
[0]=>
string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
}
["TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA"]=>
array(1) {
[0]=>
string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
}
["TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA"]=>
array(1) {
[0]=>
string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
}
["TLS_RSA_WITH_3DES_EDE_CBC_SHA"]=>
array(1) {
[0]=>
string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
}
}
["tls_version"]=>
string(7) "TLS 1.2"
["rating"]=>
string(3) "Bad"
}
Ausgabe Ubuntu 16.04:
class stdClass#1 (10) {
public $given_cipher_suites =>
array(79) {
[0] =>
string(37) "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
[1] =>
string(39) "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"
[2] =>
string(37) "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"
[3] =>
string(39) "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384"
[4] =>
string(34) "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"
[5] =>
string(36) "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA"
[6] =>
string(34) "TLS_DH_DSS_WITH_AES_256_GCM_SHA384"
[7] =>
string(35) "TLS_DHE_DSS_WITH_AES_256_GCM_SHA384"
[8] =>
string(34) "TLS_DH_RSA_WITH_AES_256_GCM_SHA384"
[9] =>
string(35) "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384"
[10] =>
string(35) "TLS_DHE_RSA_WITH_AES_256_CBC_SHA256"
[11] =>
string(35) "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256"
[12] =>
string(34) "TLS_DH_RSA_WITH_AES_256_CBC_SHA256"
[13] =>
string(34) "TLS_DH_DSS_WITH_AES_256_CBC_SHA256"
[14] =>
string(32) "TLS_DHE_RSA_WITH_AES_256_CBC_SHA"
[15] =>
string(32) "TLS_DHE_DSS_WITH_AES_256_CBC_SHA"
[16] =>
string(31) "TLS_DH_RSA_WITH_AES_256_CBC_SHA"
[17] =>
string(31) "TLS_DH_DSS_WITH_AES_256_CBC_SHA"
[18] =>
string(37) "TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA"
[19] =>
string(37) "TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA"
[20] =>
string(36) "TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA"
[21] =>
string(36) "TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA"
[22] =>
string(36) "TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384"
[23] =>
string(38) "TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384"
[24] =>
string(36) "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384"
[25] =>
string(38) "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384"
[26] =>
string(33) "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA"
[27] =>
string(35) "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA"
[28] =>
string(31) "TLS_RSA_WITH_AES_256_GCM_SHA384"
[29] =>
string(31) "TLS_RSA_WITH_AES_256_CBC_SHA256"
[30] =>
string(28) "TLS_RSA_WITH_AES_256_CBC_SHA"
[31] =>
string(33) "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA"
[32] =>
string(37) "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
[33] =>
string(39) "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"
[34] =>
string(37) "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256"
[35] =>
string(39) "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256"
[36] =>
string(34) "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"
[37] =>
string(36) "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA"
[38] =>
string(34) "TLS_DH_DSS_WITH_AES_128_GCM_SHA256"
[39] =>
string(35) "TLS_DHE_DSS_WITH_AES_128_GCM_SHA256"
[40] =>
string(34) "TLS_DH_RSA_WITH_AES_128_GCM_SHA256"
[41] =>
string(35) "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256"
[42] =>
string(35) "TLS_DHE_RSA_WITH_AES_128_CBC_SHA256"
[43] =>
string(35) "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256"
[44] =>
string(34) "TLS_DH_RSA_WITH_AES_128_CBC_SHA256"
[45] =>
string(34) "TLS_DH_DSS_WITH_AES_128_CBC_SHA256"
[46] =>
string(32) "TLS_DHE_RSA_WITH_AES_128_CBC_SHA"
[47] =>
string(32) "TLS_DHE_DSS_WITH_AES_128_CBC_SHA"
[48] =>
string(31) "TLS_DH_RSA_WITH_AES_128_CBC_SHA"
[49] =>
string(31) "TLS_DH_DSS_WITH_AES_128_CBC_SHA"
[50] =>
string(29) "TLS_DHE_RSA_WITH_SEED_CBC_SHA"
[51] =>
string(29) "TLS_DHE_DSS_WITH_SEED_CBC_SHA"
[52] =>
string(28) "TLS_DH_RSA_WITH_SEED_CBC_SHA"
[53] =>
string(28) "TLS_DH_DSS_WITH_SEED_CBC_SHA"
[54] =>
string(37) "TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA"
[55] =>
string(37) "TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA"
[56] =>
string(36) "TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA"
[57] =>
string(36) "TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA"
[58] =>
string(36) "TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256"
[59] =>
string(38) "TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256"
[60] =>
string(36) "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256"
[61] =>
string(38) "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256"
[62] =>
string(33) "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA"
[63] =>
string(35) "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA"
[64] =>
string(31) "TLS_RSA_WITH_AES_128_GCM_SHA256"
[65] =>
string(31) "TLS_RSA_WITH_AES_128_CBC_SHA256"
[66] =>
string(28) "TLS_RSA_WITH_AES_128_CBC_SHA"
[67] =>
string(25) "TLS_RSA_WITH_SEED_CBC_SHA"
[68] =>
string(33) "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA"
[69] =>
string(35) "TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA"
[70] =>
string(37) "TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA"
[71] =>
string(33) "TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA"
[72] =>
string(33) "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA"
[73] =>
string(32) "TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA"
[74] =>
string(32) "TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA"
[75] =>
string(34) "TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA"
[76] =>
string(36) "TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA"
[77] =>
string(29) "TLS_RSA_WITH_3DES_EDE_CBC_SHA"
[78] =>
string(33) "TLS_EMPTY_RENEGOTIATION_INFO_SCSV"
}
public $ephemeral_keys_supported =>
bool(true)
public $session_ticket_supported =>
bool(false)
public $tls_compression_supported =>
bool(false)
public $unknown_cipher_suite_supported =>
bool(false)
public $beast_vuln =>
bool(false)
public $able_to_detect_n_minus_one_splitting =>
bool(false)
public $insecure_cipher_suites =>
class stdClass#2 (0) {
}
public $tls_version =>
string(7) "TLS 1.2"
public $rating =>
string(13) "Probably Okay"
}
Ist dieser Blog tot? War früher Stammgast in diesem Blog, leider gibt es hier gar keine neue Themen mehr?
Paul
30 Jul 18 at 20:45
@Paul Zeit ist leider ein sehr begrenztes Gut geworden, so dass der Blog drunter leidet. Auch die Tatsache, dass ich viel mehr SysAdmin-Zeug mache und weniger PHP, spielt da mit rein. Deshalb sind die PHP-Themen, die einem vor die Füße fallen, auch deutlich weniger geworden.
Mal schauen wann ich wieder Zeit finde. Ein paar kleinere Themen haben sich ja doch angesammelt mit der Zeit. Nur ist es aktuell so waaaarm, da vergeht einem die Lust am Abend nach der Arbeit 🙁 (und man hat ja auch den ein oder anderen Grillabend, den ich dem Blog leicht vorziehe 🙂 )
Michael Kliewe
1 Aug 18 at 12:08