PHPGangsta - Der praktische PHP Blog

PHP Blog von PHPGangsta

PHP, curl und TLS 1.2 als Minimum

with 2 comments

TLS 1.2 ist im Payment-Bereich weiter auf dem Vormarsch, immer mehr Zahlungsanbieter setzen TLS 1.2 als Minimumversion fest. Das Payment Card Industry Security Standards Council (PCI SSC) hat die Frist von 2016 auf 2018 verschoben. PayPal wird am 30. Juni 2018 TLS 1.0 und 1.1 abschalten. Paysafecard wird selbiges bereits im Februar 2018 tun.

Wer einen Zahlungsanbieter eingebunden hat, und deren API nutzt, sollte baldmöglichst prüfen ob seine Systeme TLS 1.2 beherrschen. Für halbwegs aktuelle Systeme sollte das gelten, Ubuntu 14.04 geht so gerade noch. Doch seht selbst.

Folgendes Script testet die TLS-Einstellungen von PHP (curl) mit Hilfe der Webseite https://www.howsmyssl.com:

?
1
2
3
4
5
6
7
8
<?php
$ch = curl_init('https://www.howsmyssl.com/a/check');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$data = curl_exec($ch);
curl_close($ch);
 
$json = json_decode($data);
var_dump($json);

Die Ergebnisse:

Ubuntu 13.10: TLS 1.1 „Bad“
Ubuntu 14.04: TLS 1.2 „Bad“
Ubuntu 16.04: TLS 1.2 „Probably Okay“

Ein weiterer Grund, immer up2date zu bleiben. Ubuntu 13.10 erhält seit Jahren keine Security-Updates mehr, sollte also eh nirgends mehr eingesetzt werden (besonders nicht in Payment-Systemen).

===================================

Hier die ausführlichen Ausgaben der 3 untersuchten Ubuntu-Versionen:

Ausgabe Ubuntu 13.10.:

?
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
object(stdClass)#1 (10) {
  ["given_cipher_suites"]=>
  array(51) {
    [0]=>
    string(34) "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"
    [1]=>
    string(36) "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA"
    [2]=>
    string(36) "TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA"
    [3]=>
    string(36) "TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA"
    [4]=>
    string(32) "TLS_DHE_RSA_WITH_AES_256_CBC_SHA"
    [5]=>
    string(32) "TLS_DHE_DSS_WITH_AES_256_CBC_SHA"
    [6]=>
    string(37) "TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA"
    [7]=>
    string(37) "TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA"
    [8]=>
    string(33) "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA"
    [9]=>
    string(35) "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA"
    [10]=>
    string(28) "TLS_RSA_WITH_AES_256_CBC_SHA"
    [11]=>
    string(33) "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA"
    [12]=>
    string(35) "TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA"
    [13]=>
    string(37) "TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA"
    [14]=>
    string(37) "TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA"
    [15]=>
    string(37) "TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA"
    [16]=>
    string(33) "TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA"
    [17]=>
    string(33) "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA"
    [18]=>
    string(34) "TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA"
    [19]=>
    string(36) "TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA"
    [20]=>
    string(29) "TLS_RSA_WITH_3DES_EDE_CBC_SHA"
    [21]=>
    string(34) "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"
    [22]=>
    string(36) "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA"
    [23]=>
    string(36) "TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA"
    [24]=>
    string(36) "TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA"
    [25]=>
    string(32) "TLS_DHE_RSA_WITH_AES_128_CBC_SHA"
    [26]=>
    string(32) "TLS_DHE_DSS_WITH_AES_128_CBC_SHA"
    [27]=>
    string(29) "TLS_DHE_RSA_WITH_SEED_CBC_SHA"
    [28]=>
    string(29) "TLS_DHE_DSS_WITH_SEED_CBC_SHA"
    [29]=>
    string(37) "TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA"
    [30]=>
    string(37) "TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA"
    [31]=>
    string(33) "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA"
    [32]=>
    string(35) "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA"
    [33]=>
    string(28) "TLS_RSA_WITH_AES_128_CBC_SHA"
    [34]=>
    string(25) "TLS_RSA_WITH_SEED_CBC_SHA"
    [35]=>
    string(33) "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA"
    [36]=>
    string(30) "TLS_ECDHE_RSA_WITH_RC4_128_SHA"
    [37]=>
    string(32) "TLS_ECDHE_ECDSA_WITH_RC4_128_SHA"
    [38]=>
    string(29) "TLS_ECDH_RSA_WITH_RC4_128_SHA"
    [39]=>
    string(31) "TLS_ECDH_ECDSA_WITH_RC4_128_SHA"
    [40]=>
    string(24) "TLS_RSA_WITH_RC4_128_SHA"
    [41]=>
    string(24) "TLS_RSA_WITH_RC4_128_MD5"
    [42]=>
    string(28) "TLS_DHE_RSA_WITH_DES_CBC_SHA"
    [43]=>
    string(28) "TLS_DHE_DSS_WITH_DES_CBC_SHA"
    [44]=>
    string(24) "TLS_RSA_WITH_DES_CBC_SHA"
    [45]=>
    string(37) "TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA"
    [46]=>
    string(37) "TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA"
    [47]=>
    string(33) "TLS_RSA_EXPORT_WITH_DES40_CBC_SHA"
    [48]=>
    string(34) "TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5"
    [49]=>
    string(30) "TLS_RSA_EXPORT_WITH_RC4_40_MD5"
    [50]=>
    string(33) "TLS_EMPTY_RENEGOTIATION_INFO_SCSV"
  }
  ["ephemeral_keys_supported"]=>
  bool(true)
  ["session_ticket_supported"]=>
  bool(false)
  ["tls_compression_supported"]=>
  bool(false)
  ["unknown_cipher_suite_supported"]=>
  bool(false)
  ["beast_vuln"]=>
  bool(false)
  ["able_to_detect_n_minus_one_splitting"]=>
  bool(false)
  ["insecure_cipher_suites"]=>
  object(stdClass)#2 (23) {
    ["TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(49) "uses keys smaller than 128 bits in its encryption"
    }
    ["TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
    }
    ["TLS_DHE_DSS_WITH_DES_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(49) "uses keys smaller than 128 bits in its encryption"
    }
    ["TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(49) "uses keys smaller than 128 bits in its encryption"
    }
    ["TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
    }
    ["TLS_DHE_RSA_WITH_DES_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(49) "uses keys smaller than 128 bits in its encryption"
    }
    ["TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
    }
    ["TLS_ECDHE_ECDSA_WITH_RC4_128_SHA"]=>
    array(1) {
      [0]=>
      string(48) "uses RC4 which has insecure biases in its output"
    }
    ["TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
    }
    ["TLS_ECDHE_RSA_WITH_RC4_128_SHA"]=>
    array(1) {
      [0]=>
      string(48) "uses RC4 which has insecure biases in its output"
    }
    ["TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
    }
    ["TLS_ECDH_ECDSA_WITH_RC4_128_SHA"]=>
    array(1) {
      [0]=>
      string(48) "uses RC4 which has insecure biases in its output"
    }
    ["TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
    }
    ["TLS_ECDH_RSA_WITH_RC4_128_SHA"]=>
    array(1) {
      [0]=>
      string(48) "uses RC4 which has insecure biases in its output"
    }
    ["TLS_RSA_EXPORT_WITH_DES40_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(49) "uses keys smaller than 128 bits in its encryption"
    }
    ["TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5"]=>
    array(1) {
      [0]=>
      string(49) "uses keys smaller than 128 bits in its encryption"
    }
    ["TLS_RSA_EXPORT_WITH_RC4_40_MD5"]=>
    array(2) {
      [0]=>
      string(49) "uses keys smaller than 128 bits in its encryption"
      [1]=>
      string(48) "uses RC4 which has insecure biases in its output"
    }
    ["TLS_RSA_WITH_3DES_EDE_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
    }
    ["TLS_RSA_WITH_DES_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(49) "uses keys smaller than 128 bits in its encryption"
    }
    ["TLS_RSA_WITH_RC4_128_MD5"]=>
    array(1) {
      [0]=>
      string(48) "uses RC4 which has insecure biases in its output"
    }
    ["TLS_RSA_WITH_RC4_128_SHA"]=>
    array(1) {
      [0]=>
      string(48) "uses RC4 which has insecure biases in its output"
    }
    ["TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
    }
    ["TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
    }
  }
  ["tls_version"]=>
  string(7) "TLS 1.1"
  ["rating"]=>
  string(3) "Bad"
}

Ausgabe Ubuntu 14.04:

?
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
object(stdClass)#1 (10) {
  ["given_cipher_suites"]=>
  array(59) {
    [0]=>
    string(37) "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
    [1]=>
    string(39) "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"
    [2]=>
    string(37) "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"
    [3]=>
    string(39) "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384"
    [4]=>
    string(34) "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"
    [5]=>
    string(36) "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA"
    [6]=>
    string(35) "TLS_DHE_DSS_WITH_AES_256_GCM_SHA384"
    [7]=>
    string(35) "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384"
    [8]=>
    string(35) "TLS_DHE_RSA_WITH_AES_256_CBC_SHA256"
    [9]=>
    string(35) "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256"
    [10]=>
    string(32) "TLS_DHE_RSA_WITH_AES_256_CBC_SHA"
    [11]=>
    string(32) "TLS_DHE_DSS_WITH_AES_256_CBC_SHA"
    [12]=>
    string(37) "TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA"
    [13]=>
    string(37) "TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA"
    [14]=>
    string(36) "TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384"
    [15]=>
    string(38) "TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384"
    [16]=>
    string(36) "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384"
    [17]=>
    string(38) "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384"
    [18]=>
    string(33) "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA"
    [19]=>
    string(35) "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA"
    [20]=>
    string(31) "TLS_RSA_WITH_AES_256_GCM_SHA384"
    [21]=>
    string(31) "TLS_RSA_WITH_AES_256_CBC_SHA256"
    [22]=>
    string(28) "TLS_RSA_WITH_AES_256_CBC_SHA"
    [23]=>
    string(33) "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA"
    [24]=>
    string(35) "TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA"
    [25]=>
    string(37) "TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA"
    [26]=>
    string(33) "TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA"
    [27]=>
    string(33) "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA"
    [28]=>
    string(34) "TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA"
    [29]=>
    string(36) "TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA"
    [30]=>
    string(29) "TLS_RSA_WITH_3DES_EDE_CBC_SHA"
    [31]=>
    string(37) "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
    [32]=>
    string(39) "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"
    [33]=>
    string(37) "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256"
    [34]=>
    string(39) "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256"
    [35]=>
    string(34) "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"
    [36]=>
    string(36) "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA"
    [37]=>
    string(35) "TLS_DHE_DSS_WITH_AES_128_GCM_SHA256"
    [38]=>
    string(35) "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256"
    [39]=>
    string(35) "TLS_DHE_RSA_WITH_AES_128_CBC_SHA256"
    [40]=>
    string(35) "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256"
    [41]=>
    string(32) "TLS_DHE_RSA_WITH_AES_128_CBC_SHA"
    [42]=>
    string(32) "TLS_DHE_DSS_WITH_AES_128_CBC_SHA"
    [43]=>
    string(29) "TLS_DHE_RSA_WITH_SEED_CBC_SHA"
    [44]=>
    string(29) "TLS_DHE_DSS_WITH_SEED_CBC_SHA"
    [45]=>
    string(37) "TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA"
    [46]=>
    string(37) "TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA"
    [47]=>
    string(36) "TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256"
    [48]=>
    string(38) "TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256"
    [49]=>
    string(36) "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256"
    [50]=>
    string(38) "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256"
    [51]=>
    string(33) "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA"
    [52]=>
    string(35) "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA"
    [53]=>
    string(31) "TLS_RSA_WITH_AES_128_GCM_SHA256"
    [54]=>
    string(31) "TLS_RSA_WITH_AES_128_CBC_SHA256"
    [55]=>
    string(28) "TLS_RSA_WITH_AES_128_CBC_SHA"
    [56]=>
    string(25) "TLS_RSA_WITH_SEED_CBC_SHA"
    [57]=>
    string(33) "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA"
    [58]=>
    string(33) "TLS_EMPTY_RENEGOTIATION_INFO_SCSV"
  }
  ["ephemeral_keys_supported"]=>
  bool(true)
  ["session_ticket_supported"]=>
  bool(false)
  ["tls_compression_supported"]=>
  bool(false)
  ["unknown_cipher_suite_supported"]=>
  bool(false)
  ["beast_vuln"]=>
  bool(false)
  ["able_to_detect_n_minus_one_splitting"]=>
  bool(false)
  ["insecure_cipher_suites"]=>
  object(stdClass)#2 (7) {
    ["TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
    }
    ["TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
    }
    ["TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
    }
    ["TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
    }
    ["TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
    }
    ["TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
    }
    ["TLS_RSA_WITH_3DES_EDE_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
    }
  }
  ["tls_version"]=>
  string(7) "TLS 1.2"
  ["rating"]=>
  string(3) "Bad"
}

Ausgabe Ubuntu 16.04:

?
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
class stdClass#1 (10) {
  public $given_cipher_suites =>
  array(79) {
    [0] =>
    string(37) "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
    [1] =>
    string(39) "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"
    [2] =>
    string(37) "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"
    [3] =>
    string(39) "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384"
    [4] =>
    string(34) "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"
    [5] =>
    string(36) "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA"
    [6] =>
    string(34) "TLS_DH_DSS_WITH_AES_256_GCM_SHA384"
    [7] =>
    string(35) "TLS_DHE_DSS_WITH_AES_256_GCM_SHA384"
    [8] =>
    string(34) "TLS_DH_RSA_WITH_AES_256_GCM_SHA384"
    [9] =>
    string(35) "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384"
    [10] =>
    string(35) "TLS_DHE_RSA_WITH_AES_256_CBC_SHA256"
    [11] =>
    string(35) "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256"
    [12] =>
    string(34) "TLS_DH_RSA_WITH_AES_256_CBC_SHA256"
    [13] =>
    string(34) "TLS_DH_DSS_WITH_AES_256_CBC_SHA256"
    [14] =>
    string(32) "TLS_DHE_RSA_WITH_AES_256_CBC_SHA"
    [15] =>
    string(32) "TLS_DHE_DSS_WITH_AES_256_CBC_SHA"
    [16] =>
    string(31) "TLS_DH_RSA_WITH_AES_256_CBC_SHA"
    [17] =>
    string(31) "TLS_DH_DSS_WITH_AES_256_CBC_SHA"
    [18] =>
    string(37) "TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA"
    [19] =>
    string(37) "TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA"
    [20] =>
    string(36) "TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA"
    [21] =>
    string(36) "TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA"
    [22] =>
    string(36) "TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384"
    [23] =>
    string(38) "TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384"
    [24] =>
    string(36) "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384"
    [25] =>
    string(38) "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384"
    [26] =>
    string(33) "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA"
    [27] =>
    string(35) "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA"
    [28] =>
    string(31) "TLS_RSA_WITH_AES_256_GCM_SHA384"
    [29] =>
    string(31) "TLS_RSA_WITH_AES_256_CBC_SHA256"
    [30] =>
    string(28) "TLS_RSA_WITH_AES_256_CBC_SHA"
    [31] =>
    string(33) "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA"
    [32] =>
    string(37) "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
    [33] =>
    string(39) "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"
    [34] =>
    string(37) "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256"
    [35] =>
    string(39) "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256"
    [36] =>
    string(34) "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"
    [37] =>
    string(36) "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA"
    [38] =>
    string(34) "TLS_DH_DSS_WITH_AES_128_GCM_SHA256"
    [39] =>
    string(35) "TLS_DHE_DSS_WITH_AES_128_GCM_SHA256"
    [40] =>
    string(34) "TLS_DH_RSA_WITH_AES_128_GCM_SHA256"
    [41] =>
    string(35) "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256"
    [42] =>
    string(35) "TLS_DHE_RSA_WITH_AES_128_CBC_SHA256"
    [43] =>
    string(35) "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256"
    [44] =>
    string(34) "TLS_DH_RSA_WITH_AES_128_CBC_SHA256"
    [45] =>
    string(34) "TLS_DH_DSS_WITH_AES_128_CBC_SHA256"
    [46] =>
    string(32) "TLS_DHE_RSA_WITH_AES_128_CBC_SHA"
    [47] =>
    string(32) "TLS_DHE_DSS_WITH_AES_128_CBC_SHA"
    [48] =>
    string(31) "TLS_DH_RSA_WITH_AES_128_CBC_SHA"
    [49] =>
    string(31) "TLS_DH_DSS_WITH_AES_128_CBC_SHA"
    [50] =>
    string(29) "TLS_DHE_RSA_WITH_SEED_CBC_SHA"
    [51] =>
    string(29) "TLS_DHE_DSS_WITH_SEED_CBC_SHA"
    [52] =>
    string(28) "TLS_DH_RSA_WITH_SEED_CBC_SHA"
    [53] =>
    string(28) "TLS_DH_DSS_WITH_SEED_CBC_SHA"
    [54] =>
    string(37) "TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA"
    [55] =>
    string(37) "TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA"
    [56] =>
    string(36) "TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA"
    [57] =>
    string(36) "TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA"
    [58] =>
    string(36) "TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256"
    [59] =>
    string(38) "TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256"
    [60] =>
    string(36) "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256"
    [61] =>
    string(38) "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256"
    [62] =>
    string(33) "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA"
    [63] =>
    string(35) "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA"
    [64] =>
    string(31) "TLS_RSA_WITH_AES_128_GCM_SHA256"
    [65] =>
    string(31) "TLS_RSA_WITH_AES_128_CBC_SHA256"
    [66] =>
    string(28) "TLS_RSA_WITH_AES_128_CBC_SHA"
    [67] =>
    string(25) "TLS_RSA_WITH_SEED_CBC_SHA"
    [68] =>
    string(33) "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA"
    [69] =>
    string(35) "TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA"
    [70] =>
    string(37) "TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA"
    [71] =>
    string(33) "TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA"
    [72] =>
    string(33) "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA"
    [73] =>
    string(32) "TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA"
    [74] =>
    string(32) "TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA"
    [75] =>
    string(34) "TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA"
    [76] =>
    string(36) "TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA"
    [77] =>
    string(29) "TLS_RSA_WITH_3DES_EDE_CBC_SHA"
    [78] =>
    string(33) "TLS_EMPTY_RENEGOTIATION_INFO_SCSV"
  }
  public $ephemeral_keys_supported =>
  bool(true)
  public $session_ticket_supported =>
  bool(false)
  public $tls_compression_supported =>
  bool(false)
  public $unknown_cipher_suite_supported =>
  bool(false)
  public $beast_vuln =>
  bool(false)
  public $able_to_detect_n_minus_one_splitting =>
  bool(false)
  public $insecure_cipher_suites =>
  class stdClass#2 (0) {
  }
  public $tls_version =>
  string(7) "TLS 1.2"
  public $rating =>
  string(13) "Probably Okay"
}

 

Keine ähnlichen Artikel.

Written by Michael Kliewe

Dezember 4th, 2017 at 11:43 pm

Posted in PHP,Server-Software

«
»

2 Responses to 'PHP, curl und TLS 1.2 als Minimum'

Subscribe to comments with RSS or TrackBack to 'PHP, curl und TLS 1.2 als Minimum'.

  1. Ist dieser Blog tot? War früher Stammgast in diesem Blog, leider gibt es hier gar keine neue Themen mehr?

    Paul

    30 Juli 18 at 20:45

  2. @Paul Zeit ist leider ein sehr begrenztes Gut geworden, so dass der Blog drunter leidet. Auch die Tatsache, dass ich viel mehr SysAdmin-Zeug mache und weniger PHP, spielt da mit rein. Deshalb sind die PHP-Themen, die einem vor die Füße fallen, auch deutlich weniger geworden.

    Mal schauen wann ich wieder Zeit finde. Ein paar kleinere Themen haben sich ja doch angesammelt mit der Zeit. Nur ist es aktuell so waaaarm, da vergeht einem die Lust am Abend nach der Arbeit 🙁 (und man hat ja auch den ein oder anderen Grillabend, den ich dem Blog leicht vorziehe 🙂 )

    Michael Kliewe

    1 Aug. 18 at 12:08

Leave a Reply

You can add images to your comment by clicking here.