PHPGangsta - Der praktische PHP Blog

PHP Blog von PHPGangsta


PHP, curl und TLS 1.2 als Minimum

without comments

TLS 1.2 ist im Payment-Bereich weiter auf dem Vormarsch, immer mehr Zahlungsanbieter setzen TLS 1.2 als Minimumversion fest. Das Payment Card Industry Security Standards Council (PCI SSC) hat die Frist von 2016 auf 2018 verschoben. PayPal wird am 30. Juni 2018 TLS 1.0 und 1.1 abschalten. Paysafecard wird selbiges bereits im Februar 2018 tun.

Wer einen Zahlungsanbieter eingebunden hat, und deren API nutzt, sollte baldmöglichst prüfen ob seine Systeme TLS 1.2 beherrschen. Für halbwegs aktuelle Systeme sollte das gelten, Ubuntu 14.04 geht so gerade noch. Doch seht selbst.

Folgendes Script testet die TLS-Einstellungen von PHP (curl) mit Hilfe der Webseite https://www.howsmyssl.com:

<?php
$ch = curl_init('https://www.howsmyssl.com/a/check');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$data = curl_exec($ch);
curl_close($ch);

$json = json_decode($data);
var_dump($json);

Die Ergebnisse:

Ubuntu 13.10: TLS 1.1 „Bad“
Ubuntu 14.04: TLS 1.2 „Bad“
Ubuntu 16.04: TLS 1.2 „Probably Okay“

Ein weiterer Grund, immer up2date zu bleiben. Ubuntu 13.10 erhält seit Jahren keine Security-Updates mehr, sollte also eh nirgends mehr eingesetzt werden (besonders nicht in Payment-Systemen).

===================================

Hier die ausführlichen Ausgaben der 3 untersuchten Ubuntu-Versionen:

Ausgabe Ubuntu 13.10.:

object(stdClass)#1 (10) {
  ["given_cipher_suites"]=>
  array(51) {
    [0]=>
    string(34) "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"
    [1]=>
    string(36) "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA"
    [2]=>
    string(36) "TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA"
    [3]=>
    string(36) "TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA"
    [4]=>
    string(32) "TLS_DHE_RSA_WITH_AES_256_CBC_SHA"
    [5]=>
    string(32) "TLS_DHE_DSS_WITH_AES_256_CBC_SHA"
    [6]=>
    string(37) "TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA"
    [7]=>
    string(37) "TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA"
    [8]=>
    string(33) "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA"
    [9]=>
    string(35) "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA"
    [10]=>
    string(28) "TLS_RSA_WITH_AES_256_CBC_SHA"
    [11]=>
    string(33) "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA"
    [12]=>
    string(35) "TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA"
    [13]=>
    string(37) "TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA"
    [14]=>
    string(37) "TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA"
    [15]=>
    string(37) "TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA"
    [16]=>
    string(33) "TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA"
    [17]=>
    string(33) "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA"
    [18]=>
    string(34) "TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA"
    [19]=>
    string(36) "TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA"
    [20]=>
    string(29) "TLS_RSA_WITH_3DES_EDE_CBC_SHA"
    [21]=>
    string(34) "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"
    [22]=>
    string(36) "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA"
    [23]=>
    string(36) "TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA"
    [24]=>
    string(36) "TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA"
    [25]=>
    string(32) "TLS_DHE_RSA_WITH_AES_128_CBC_SHA"
    [26]=>
    string(32) "TLS_DHE_DSS_WITH_AES_128_CBC_SHA"
    [27]=>
    string(29) "TLS_DHE_RSA_WITH_SEED_CBC_SHA"
    [28]=>
    string(29) "TLS_DHE_DSS_WITH_SEED_CBC_SHA"
    [29]=>
    string(37) "TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA"
    [30]=>
    string(37) "TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA"
    [31]=>
    string(33) "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA"
    [32]=>
    string(35) "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA"
    [33]=>
    string(28) "TLS_RSA_WITH_AES_128_CBC_SHA"
    [34]=>
    string(25) "TLS_RSA_WITH_SEED_CBC_SHA"
    [35]=>
    string(33) "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA"
    [36]=>
    string(30) "TLS_ECDHE_RSA_WITH_RC4_128_SHA"
    [37]=>
    string(32) "TLS_ECDHE_ECDSA_WITH_RC4_128_SHA"
    [38]=>
    string(29) "TLS_ECDH_RSA_WITH_RC4_128_SHA"
    [39]=>
    string(31) "TLS_ECDH_ECDSA_WITH_RC4_128_SHA"
    [40]=>
    string(24) "TLS_RSA_WITH_RC4_128_SHA"
    [41]=>
    string(24) "TLS_RSA_WITH_RC4_128_MD5"
    [42]=>
    string(28) "TLS_DHE_RSA_WITH_DES_CBC_SHA"
    [43]=>
    string(28) "TLS_DHE_DSS_WITH_DES_CBC_SHA"
    [44]=>
    string(24) "TLS_RSA_WITH_DES_CBC_SHA"
    [45]=>
    string(37) "TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA"
    [46]=>
    string(37) "TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA"
    [47]=>
    string(33) "TLS_RSA_EXPORT_WITH_DES40_CBC_SHA"
    [48]=>
    string(34) "TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5"
    [49]=>
    string(30) "TLS_RSA_EXPORT_WITH_RC4_40_MD5"
    [50]=>
    string(33) "TLS_EMPTY_RENEGOTIATION_INFO_SCSV"
  }
  ["ephemeral_keys_supported"]=>
  bool(true)
  ["session_ticket_supported"]=>
  bool(false)
  ["tls_compression_supported"]=>
  bool(false)
  ["unknown_cipher_suite_supported"]=>
  bool(false)
  ["beast_vuln"]=>
  bool(false)
  ["able_to_detect_n_minus_one_splitting"]=>
  bool(false)
  ["insecure_cipher_suites"]=>
  object(stdClass)#2 (23) {
    ["TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(49) "uses keys smaller than 128 bits in its encryption"
    }
    ["TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
    }
    ["TLS_DHE_DSS_WITH_DES_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(49) "uses keys smaller than 128 bits in its encryption"
    }
    ["TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(49) "uses keys smaller than 128 bits in its encryption"
    }
    ["TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
    }
    ["TLS_DHE_RSA_WITH_DES_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(49) "uses keys smaller than 128 bits in its encryption"
    }
    ["TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
    }
    ["TLS_ECDHE_ECDSA_WITH_RC4_128_SHA"]=>
    array(1) {
      [0]=>
      string(48) "uses RC4 which has insecure biases in its output"
    }
    ["TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
    }
    ["TLS_ECDHE_RSA_WITH_RC4_128_SHA"]=>
    array(1) {
      [0]=>
      string(48) "uses RC4 which has insecure biases in its output"
    }
    ["TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
    }
    ["TLS_ECDH_ECDSA_WITH_RC4_128_SHA"]=>
    array(1) {
      [0]=>
      string(48) "uses RC4 which has insecure biases in its output"
    }
    ["TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
    }
    ["TLS_ECDH_RSA_WITH_RC4_128_SHA"]=>
    array(1) {
      [0]=>
      string(48) "uses RC4 which has insecure biases in its output"
    }
    ["TLS_RSA_EXPORT_WITH_DES40_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(49) "uses keys smaller than 128 bits in its encryption"
    }
    ["TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5"]=>
    array(1) {
      [0]=>
      string(49) "uses keys smaller than 128 bits in its encryption"
    }
    ["TLS_RSA_EXPORT_WITH_RC4_40_MD5"]=>
    array(2) {
      [0]=>
      string(49) "uses keys smaller than 128 bits in its encryption"
      [1]=>
      string(48) "uses RC4 which has insecure biases in its output"
    }
    ["TLS_RSA_WITH_3DES_EDE_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
    }
    ["TLS_RSA_WITH_DES_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(49) "uses keys smaller than 128 bits in its encryption"
    }
    ["TLS_RSA_WITH_RC4_128_MD5"]=>
    array(1) {
      [0]=>
      string(48) "uses RC4 which has insecure biases in its output"
    }
    ["TLS_RSA_WITH_RC4_128_SHA"]=>
    array(1) {
      [0]=>
      string(48) "uses RC4 which has insecure biases in its output"
    }
    ["TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
    }
    ["TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
    }
  }
  ["tls_version"]=>
  string(7) "TLS 1.1"
  ["rating"]=>
  string(3) "Bad"
}

Ausgabe Ubuntu 14.04:

object(stdClass)#1 (10) {
  ["given_cipher_suites"]=>
  array(59) {
    [0]=>
    string(37) "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
    [1]=>
    string(39) "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"
    [2]=>
    string(37) "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"
    [3]=>
    string(39) "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384"
    [4]=>
    string(34) "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"
    [5]=>
    string(36) "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA"
    [6]=>
    string(35) "TLS_DHE_DSS_WITH_AES_256_GCM_SHA384"
    [7]=>
    string(35) "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384"
    [8]=>
    string(35) "TLS_DHE_RSA_WITH_AES_256_CBC_SHA256"
    [9]=>
    string(35) "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256"
    [10]=>
    string(32) "TLS_DHE_RSA_WITH_AES_256_CBC_SHA"
    [11]=>
    string(32) "TLS_DHE_DSS_WITH_AES_256_CBC_SHA"
    [12]=>
    string(37) "TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA"
    [13]=>
    string(37) "TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA"
    [14]=>
    string(36) "TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384"
    [15]=>
    string(38) "TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384"
    [16]=>
    string(36) "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384"
    [17]=>
    string(38) "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384"
    [18]=>
    string(33) "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA"
    [19]=>
    string(35) "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA"
    [20]=>
    string(31) "TLS_RSA_WITH_AES_256_GCM_SHA384"
    [21]=>
    string(31) "TLS_RSA_WITH_AES_256_CBC_SHA256"
    [22]=>
    string(28) "TLS_RSA_WITH_AES_256_CBC_SHA"
    [23]=>
    string(33) "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA"
    [24]=>
    string(35) "TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA"
    [25]=>
    string(37) "TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA"
    [26]=>
    string(33) "TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA"
    [27]=>
    string(33) "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA"
    [28]=>
    string(34) "TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA"
    [29]=>
    string(36) "TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA"
    [30]=>
    string(29) "TLS_RSA_WITH_3DES_EDE_CBC_SHA"
    [31]=>
    string(37) "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
    [32]=>
    string(39) "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"
    [33]=>
    string(37) "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256"
    [34]=>
    string(39) "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256"
    [35]=>
    string(34) "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"
    [36]=>
    string(36) "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA"
    [37]=>
    string(35) "TLS_DHE_DSS_WITH_AES_128_GCM_SHA256"
    [38]=>
    string(35) "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256"
    [39]=>
    string(35) "TLS_DHE_RSA_WITH_AES_128_CBC_SHA256"
    [40]=>
    string(35) "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256"
    [41]=>
    string(32) "TLS_DHE_RSA_WITH_AES_128_CBC_SHA"
    [42]=>
    string(32) "TLS_DHE_DSS_WITH_AES_128_CBC_SHA"
    [43]=>
    string(29) "TLS_DHE_RSA_WITH_SEED_CBC_SHA"
    [44]=>
    string(29) "TLS_DHE_DSS_WITH_SEED_CBC_SHA"
    [45]=>
    string(37) "TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA"
    [46]=>
    string(37) "TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA"
    [47]=>
    string(36) "TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256"
    [48]=>
    string(38) "TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256"
    [49]=>
    string(36) "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256"
    [50]=>
    string(38) "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256"
    [51]=>
    string(33) "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA"
    [52]=>
    string(35) "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA"
    [53]=>
    string(31) "TLS_RSA_WITH_AES_128_GCM_SHA256"
    [54]=>
    string(31) "TLS_RSA_WITH_AES_128_CBC_SHA256"
    [55]=>
    string(28) "TLS_RSA_WITH_AES_128_CBC_SHA"
    [56]=>
    string(25) "TLS_RSA_WITH_SEED_CBC_SHA"
    [57]=>
    string(33) "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA"
    [58]=>
    string(33) "TLS_EMPTY_RENEGOTIATION_INFO_SCSV"
  }
  ["ephemeral_keys_supported"]=>
  bool(true)
  ["session_ticket_supported"]=>
  bool(false)
  ["tls_compression_supported"]=>
  bool(false)
  ["unknown_cipher_suite_supported"]=>
  bool(false)
  ["beast_vuln"]=>
  bool(false)
  ["able_to_detect_n_minus_one_splitting"]=>
  bool(false)
  ["insecure_cipher_suites"]=>
  object(stdClass)#2 (7) {
    ["TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
    }
    ["TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
    }
    ["TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
    }
    ["TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
    }
    ["TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
    }
    ["TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
    }
    ["TLS_RSA_WITH_3DES_EDE_CBC_SHA"]=>
    array(1) {
      [0]=>
      string(113) "uses 3DES which is vulnerable to the Sweet32 attack but was not configured as a fallback in the ciphersuite order"
    }
  }
  ["tls_version"]=>
  string(7) "TLS 1.2"
  ["rating"]=>
  string(3) "Bad"
}

Ausgabe Ubuntu 16.04:

class stdClass#1 (10) {
  public $given_cipher_suites =>
  array(79) {
    [0] =>
    string(37) "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
    [1] =>
    string(39) "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"
    [2] =>
    string(37) "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"
    [3] =>
    string(39) "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384"
    [4] =>
    string(34) "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"
    [5] =>
    string(36) "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA"
    [6] =>
    string(34) "TLS_DH_DSS_WITH_AES_256_GCM_SHA384"
    [7] =>
    string(35) "TLS_DHE_DSS_WITH_AES_256_GCM_SHA384"
    [8] =>
    string(34) "TLS_DH_RSA_WITH_AES_256_GCM_SHA384"
    [9] =>
    string(35) "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384"
    [10] =>
    string(35) "TLS_DHE_RSA_WITH_AES_256_CBC_SHA256"
    [11] =>
    string(35) "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256"
    [12] =>
    string(34) "TLS_DH_RSA_WITH_AES_256_CBC_SHA256"
    [13] =>
    string(34) "TLS_DH_DSS_WITH_AES_256_CBC_SHA256"
    [14] =>
    string(32) "TLS_DHE_RSA_WITH_AES_256_CBC_SHA"
    [15] =>
    string(32) "TLS_DHE_DSS_WITH_AES_256_CBC_SHA"
    [16] =>
    string(31) "TLS_DH_RSA_WITH_AES_256_CBC_SHA"
    [17] =>
    string(31) "TLS_DH_DSS_WITH_AES_256_CBC_SHA"
    [18] =>
    string(37) "TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA"
    [19] =>
    string(37) "TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA"
    [20] =>
    string(36) "TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA"
    [21] =>
    string(36) "TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA"
    [22] =>
    string(36) "TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384"
    [23] =>
    string(38) "TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384"
    [24] =>
    string(36) "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384"
    [25] =>
    string(38) "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384"
    [26] =>
    string(33) "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA"
    [27] =>
    string(35) "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA"
    [28] =>
    string(31) "TLS_RSA_WITH_AES_256_GCM_SHA384"
    [29] =>
    string(31) "TLS_RSA_WITH_AES_256_CBC_SHA256"
    [30] =>
    string(28) "TLS_RSA_WITH_AES_256_CBC_SHA"
    [31] =>
    string(33) "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA"
    [32] =>
    string(37) "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
    [33] =>
    string(39) "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"
    [34] =>
    string(37) "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256"
    [35] =>
    string(39) "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256"
    [36] =>
    string(34) "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"
    [37] =>
    string(36) "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA"
    [38] =>
    string(34) "TLS_DH_DSS_WITH_AES_128_GCM_SHA256"
    [39] =>
    string(35) "TLS_DHE_DSS_WITH_AES_128_GCM_SHA256"
    [40] =>
    string(34) "TLS_DH_RSA_WITH_AES_128_GCM_SHA256"
    [41] =>
    string(35) "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256"
    [42] =>
    string(35) "TLS_DHE_RSA_WITH_AES_128_CBC_SHA256"
    [43] =>
    string(35) "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256"
    [44] =>
    string(34) "TLS_DH_RSA_WITH_AES_128_CBC_SHA256"
    [45] =>
    string(34) "TLS_DH_DSS_WITH_AES_128_CBC_SHA256"
    [46] =>
    string(32) "TLS_DHE_RSA_WITH_AES_128_CBC_SHA"
    [47] =>
    string(32) "TLS_DHE_DSS_WITH_AES_128_CBC_SHA"
    [48] =>
    string(31) "TLS_DH_RSA_WITH_AES_128_CBC_SHA"
    [49] =>
    string(31) "TLS_DH_DSS_WITH_AES_128_CBC_SHA"
    [50] =>
    string(29) "TLS_DHE_RSA_WITH_SEED_CBC_SHA"
    [51] =>
    string(29) "TLS_DHE_DSS_WITH_SEED_CBC_SHA"
    [52] =>
    string(28) "TLS_DH_RSA_WITH_SEED_CBC_SHA"
    [53] =>
    string(28) "TLS_DH_DSS_WITH_SEED_CBC_SHA"
    [54] =>
    string(37) "TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA"
    [55] =>
    string(37) "TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA"
    [56] =>
    string(36) "TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA"
    [57] =>
    string(36) "TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA"
    [58] =>
    string(36) "TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256"
    [59] =>
    string(38) "TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256"
    [60] =>
    string(36) "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256"
    [61] =>
    string(38) "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256"
    [62] =>
    string(33) "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA"
    [63] =>
    string(35) "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA"
    [64] =>
    string(31) "TLS_RSA_WITH_AES_128_GCM_SHA256"
    [65] =>
    string(31) "TLS_RSA_WITH_AES_128_CBC_SHA256"
    [66] =>
    string(28) "TLS_RSA_WITH_AES_128_CBC_SHA"
    [67] =>
    string(25) "TLS_RSA_WITH_SEED_CBC_SHA"
    [68] =>
    string(33) "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA"
    [69] =>
    string(35) "TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA"
    [70] =>
    string(37) "TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA"
    [71] =>
    string(33) "TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA"
    [72] =>
    string(33) "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA"
    [73] =>
    string(32) "TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA"
    [74] =>
    string(32) "TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA"
    [75] =>
    string(34) "TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA"
    [76] =>
    string(36) "TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA"
    [77] =>
    string(29) "TLS_RSA_WITH_3DES_EDE_CBC_SHA"
    [78] =>
    string(33) "TLS_EMPTY_RENEGOTIATION_INFO_SCSV"
  }
  public $ephemeral_keys_supported =>
  bool(true)
  public $session_ticket_supported =>
  bool(false)
  public $tls_compression_supported =>
  bool(false)
  public $unknown_cipher_suite_supported =>
  bool(false)
  public $beast_vuln =>
  bool(false)
  public $able_to_detect_n_minus_one_splitting =>
  bool(false)
  public $insecure_cipher_suites =>
  class stdClass#2 (0) {
  }
  public $tls_version =>
  string(7) "TLS 1.2"
  public $rating =>
  string(13) "Probably Okay"
}

 

Written by Michael Kliewe

Dezember 4th, 2017 at 11:43 pm

Posted in PHP,Server-Software

Leave a Reply

You can add images to your comment by clicking here.