At the moment, TLS/SSL information extracted from the handshake is stored as follows
0xc02b,0xc02f,0x009e,0xc00a,0xc009,0xc013,0xc014,0x0033,0x0039,0x009c,0x002f,0x0035,0x000a
Which, while compact, isn't particularly helpful for a human reader. Entries should be replaced with the Human readable version
For example,
0xc02b = TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
0xc02f = TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
0xc00a = TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
0xc013 = TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
0xc014 = TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
0x0088 = TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA
Need to look up the others though
Activity
2015-11-22 10:38:53
2015-11-22 10:39:00
2015-11-24 14:41:48
2015-11-24 14:44:48
2015-11-24 15:01:17
I'll start implementing something used for those first, so that it can be tested and the grab the rest from RFC 5246
2015-11-24 15:07:50
2015-11-24 15:23:24
Test is still running, but looks OK so far. Will work on building a list of the other suites from RFC 5246
2015-11-24 15:38:28
2015-11-24 15:38:31
2015-11-24 15:38:54
2015-11-24 15:53:54
Committing current build and will dig out the other details shortly
2015-11-24 15:55:42
Webhook User-Agent
View Commit
2015-11-24 15:55:42
Webhook User-Agent
View Commit
2015-11-24 16:03:05
2015-11-24 16:09:41
Webhook User-Agent
View Commit
2015-11-24 16:12:46
Test run going at the moment
2015-11-24 16:12:49
2015-11-24 16:13:26
2015-11-24 16:22:11
- RFC 4785
- RFC 7251 (though don't think that's been published yet)
2015-11-24 16:31:41
Webhook User-Agent
View Commit
2015-11-26 00:09:41
Webhook User-Agent
View Commit
2015-11-26 00:11:49
Quite a few more, in fact - http://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml
Which leaves
- RFC 4346
- RFC 5469
- RFC 2712
- RFC 5932
- RFC 4279
- RFC 6347
- RFC 5487
- RFC 5932
- RFC 5746
- RFC 7507
- RFC 5054
- RFC 5489
- RFC 6209
- RFC 6367
- RFC 6655
I may just cheat and process the registry's CSV to generate the rest
2015-11-26 12:43:12
And sed statements regenerated with
Should now (as of commit 881f9f4 ) have 100% coverage of any RFC defined ciphersuites - at least until a new RFC gets released.
2015-11-26 12:43:48
Webhook User-Agent
View Commit
2015-11-26 13:06:18
and
2015-11-26 13:12:35
Gives 100% coverage in my test samples at least, will have to add others as they come up
2015-11-26 13:13:40
2015-11-26 13:13:40
2015-11-26 13:13:48
2015-11-26 13:13:50
Webhook User-Agent
View Commit
2015-11-27 13:13:17
2015-11-27 13:13:17
2015-11-27 13:13:17
2015-11-27 13:13:38
2015-11-27 13:13:38
2015-11-27 13:13:45