Home A - Z
Page Index

An Otter Wiki

Commit 75938b

2025-02-24 15:25:13 Samuli Seppänen: -/-
Pages/CipherNegotiation.md ..
@@ 72,38 72,33 @@
## Common configurations
Commonly expected configurations of the *Effective directives* above.
### Servers
- * Version 2.5
- a. Default configuration: No effective directives specified.
- a. Configuring: `--data-ciphers`
- * Version 2.4
- a. Default configuration: No effective directives specified.
- a. Configuring: `--cipher`
- a. Configuring: `--cipher` and `--ncp-disable`
-
- * Version 2.3
- a. Default configuration: No effective directives specified.
- a. Configuring: `--cipher`
-
- * Version 2.2
- a. Default configuration: No effective directives specified.
- a. Configuring: All bets are off - Upgrade now!
+ * Version 2.5
+ 1. Default configuration: No effective directives specified.
+ 1. Configuring: `--data-ciphers`
+ * Version 2.4
+ 1. Default configuration: No effective directives specified.
+ 1. Configuring: `--cipher`
+ 1. Configuring: `--cipher` and `--ncp-disable`
+ * Version 2.3
+ 1. Default configuration: No effective directives specified.
+ 1. Configuring: `--cipher`
+ * Version 2.2
+ 1. Default configuration: No effective directives specified.
+ 1. Configuring: All bets are off - Upgrade now!
### Clients
- * Version 2.5
- a. Default configuration: No effective directives specified.
-
- * Version 2.4
- a. Default configuration: No effective directives specified.
- a. Configuring: `--cipher`
-
- * Version 2.3
- a. Default configuration: No effective directives specified.
- a. Configuring: `--cipher`
-
- * Version 2.2
- a. Default configuration: No effective directives specified.
- a. Configuring: All bets are off - Upgrade now!
+ * Version 2.5
+ 1. Default configuration: No effective directives specified.
+ * Version 2.4
+ 1. Default configuration: No effective directives specified.
+ 1. Configuring: `--cipher`
+ * Version 2.3
+ 1. Default configuration: No effective directives specified.
+ 1. Configuring: `--cipher`
+ * Version 2.2
+ 1. Default configuration: No effective directives specified.
+ 1. Configuring: All bets are off - Upgrade now!
## Expected Behaviour indexed by Server version
### Server version 2.5
@@ 119,8 114,8 @@
| | |
|-|-|
|`--data-ciphers`| NCP | Connection |
- |-| Full | **[[span(style=color: #007000, OK. AES-256-GCM )]** |
- |AES-256-GCM:AES-128-GCM:AES-256-CBC:BF-CBC| Full | **[[span(style=color: #007000, OK. AES-256-GCM )]** |
+ |-| Full | **<span style=color:#007000>OK. AES-256-GCM</span>** |
+ |AES-256-GCM:AES-128-GCM:AES-256-CBC:BF-CBC| Full | **<span style=color:#007000>OK. AES-256-GCM</span>** |
|AES-256-CBC| Full | `Fail (no shared cipher)` |
##### Client version 2.4
@@ 128,9 123,9 @@
| | |
|-|-|
| `--cipher` | NCP | Connection |
- | - | Full | **[[span(style=color: #007000, OK. AES-256-GCM )]** |
- | AES-256-CBC | Full | **[[span(style=color: #007000, OK. AES-256-GCM )]** |
- | BF-CBC | Full | **[[span(style=color: #007000, OK. AES-256-GCM )]** |
+ | - | Full | **<span style=color:#007000>OK. AES-256-GCM</span>** |
+ | AES-256-CBC | Full | **<span style=color:#007000>OK. AES-256-GCM</span>** |
+ | BF-CBC | Full | **<span style=color:#007000>OK. AES-256-GCM</span>** |
##### Client version 2.3
@@ 165,7 160,7 @@
|-|-|-|
| `--cipher` | NCP | Connection |
| - | No | *[[span(style=color: #806000, **Weak** BF-CBC )]* |
- | AES-256-CBC | No | **[[span(style=color: #007000, OK. AES-256-CBC )]** |
+ | AES-256-CBC | No | **<span style=color:#007000>OK. AES-256-CBC</span>** |
| BF-CBC | No | *[[span(style=color: #806000, **Weak** BF-CBC )]* |
##### Client version 2.2
@@ 174,7 169,7 @@
|-|-|-|
| `--cipher` | NCP | Connection |
| - | No | *[[span(style=color: #806000, **Weak** BF-CBC )]* |
- | AES-256-CBC | No | **[[span(style=color: #007000, OK. AES-256-CBC )]** |
+ | AES-256-CBC | No | **<span style=color:#007000>OK. AES-256-CBC</span>** |
| BF-CBC | No | *[[span(style=color: #806000, **Weak** BF-CBC )]* |
----
@@ 194,8 189,8 @@
| | | |
|-|-|-|
|`--data-ciphers`| NCP | Connection |
- |-| Full | **[[span(style=color: #007000, OK. AES-256-GCM )]** |
- |AES-256-GCM:AES-128-GCM:AES-256-CBC:BF-CBC| Full | **[[span(style=color: #007000, OK. AES-256-GCM )]** |
+ |-| Full | **<span style=color:#007000>OK. AES-256-GCM</span>** |
+ |AES-256-GCM:AES-128-GCM:AES-256-CBC:BF-CBC| Full | **<span style=color:#007000>OK. AES-256-GCM</span>** |
|AES-256-CBC| Full | `Fail (no shared cipher)` |
##### Client version 2.4
@@ 203,9 198,9 @@
| | | | |
|-|-|-|-|
| `--cipher` |`--ncp-ciphers`| NCP | Connection |
- | - |-| Full | **[[span(style=color: #007000, OK. AES-256-GCM )]** |
- | AES-256-CBC |-| Full | **[[span(style=color: #007000, OK. AES-256-GCM )]** |
- | BF-CBC |-| Full | **[[span(style=color: #007000, OK. AES-256-GCM )]** |
+ | - |-| Full | **OK. AES-256-GCM )]** |
+ | AES-256-CBC |-| Full | **<span style=color:#007000>OK. AES-256-GCM</span>** |
+ | BF-CBC |-| Full | **<span style=color:#007000>OK. AES-256-GCM</span>** |
##### Client version 2.3
@@ 239,18 234,18 @@
| | | |
|-|-|-|
|`--data-ciphers`| NCP | Connection |
- |-| Full | **[[span(style=color: #007000, OK. AES-256-GCM )]** |
+ |-| Full | **<span style=color:#007000>OK. AES-256-GCM</span>** |
|AES-256-GCM:AES-128-GCM:AES-256-CBC:BF-CBC| Full | **[[span(style=color: #007000, OK. AES-256-GCM )]** |
- |AES-256-CBC| Full | **[[span(style=color: #007000, OK. AES-256-CBC )]** |
+ |AES-256-CBC| Full | **<span style=color:#007000>OK. AES-256-CBC</span>** |
##### Client version 2.4
| | | | |
|-|-|-|-|
| `--cipher` |`--ncp-ciphers`| NCP | Connection |
- | - |-| Full | **[[span(style=color: #007000, OK. AES-256-GCM )]** |
- | AES-256-CBC |-| Full | **[[span(style=color: #007000, OK. AES-256-GCM )]** |
- | BF-CBC |-| Full | **[[span(style=color: #007000, OK. AES-256-GCM )]** |
+ | - |-| Full | **<span style=color:#007000>OK. AES-256-GCM</span>** |
+ | AES-256-CBC |-| Full | **<span style=color:#007000>OK. AES-256-GCM</span>** |
+ | BF-CBC |-| Full | **<span style=color:#007000>OK. AES-256-GCM</span>** |
##### Client version 2.3
@@ 258,7 253,7 @@
|-|-|-|
| `--cipher` | NCP | Connection |
| - | No | `Fail (no shared cipher)` |
- | AES-256-CBC | No | **[[span(style=color: #007000, OK. AES-256-CBC )]** |
+ | AES-256-CBC | No | **<span style=color:#007000>OK. AES-256-CBC</span>** |
| BF-CBC | No | `Fail (no shared cipher)` |
##### Client version 2.2
@@ 267,7 262,7 @@
|-|-|-|
| `--cipher` | NCP | Connection |
| - | No | `Fail (no shared cipher)` |
- | AES-256-CBC | No | **[[span(style=color: #007000, OK. AES-256-CBC )]** |
+ | AES-256-CBC | No | **<span style=color:#007000>OK. AES-256-CBC</span>** |
| BF-CBC | No | `Fail (no shared cipher)` |
----
@@ 285,7 280,7 @@
|-|-|-|
|`--data-ciphers`| NCP | Connection |
|-| Partial | `Fail (no shared cipher)` |
- |AES-256-GCM:AES-128-GCM:AES-256-CBC:BF-CBC| Partial | **[[span(style=color: #007000, OK. AES-256-CBC )]** |
+ |AES-256-GCM:AES-128-GCM:AES-256-CBC:BF-CBC| Partial | **<span style=color:#007000>OK. AES-256-CBC</span>** |
##### Client version 2.4
@@ 293,7 288,7 @@
|-|-|-|-|
| `--cipher` |`--ncp-ciphers`| NCP | Connection |
| - |-| Partial | `Fail (no shared cipher)` |
- | AES-256-CBC |-| Partial | **[[span(style=color: #007000, OK. AES-256-CBC )]** |
+ | AES-256-CBC |-| Partial | **<span style=color:#007000>OK. AES-256-CBC</span>** |
| BF-CBC |-| Partial | `Fail (no shared cipher)` |
##### Client version 2.3
@@ 302,7 297,7 @@
|-|-|-|
| `--cipher` | NCP | Connection |
| - | No | `Fail (no shared cipher)` |
- | AES-256-CBC | No | **[[span(style=color: #007000, OK. AES-256-CBC )]** |
+ | AES-256-CBC | No | **<span style=color:#007000>OK. AES-256-CBC</span>** |
| BF-CBC | No | `Fail (no shared cipher)` |
##### Client version 2.2
@@ 311,7 306,7 @@
|-|-|-|
| `--cipher` | NCP | Connection |
| - | No | `Fail (no shared cipher)` |
- | AES-256-CBC | No | **[[span(style=color: #007000, OK. AES-256-CBC )]** |
+ | AES-256-CBC | No | **<span style=color:#007000>OK. AES-256-CBC</span>** |
| BF-CBC | No | `Fail (no shared cipher)` |
----
@@ 376,7 371,7 @@
|-|-|-|
|`--data-ciphers`| NCP | Connection |
|-| Partial | `Fail (no shared cipher)` |
- |AES-256-GCM:AES-128-GCM:AES-256-CBC:BF-CBC| Partial | **[[span(style=color: #007000, OK. AES-256-CBC )]** |
+ |AES-256-GCM:AES-128-GCM:AES-256-CBC:BF-CBC| Partial | **<span style=color:#007000>OK. AES-256-CBC</span>** |
##### Client version 2.4
@@ 384,7 379,7 @@
|-|-|-|-|
| `--cipher` |`--ncp-ciphers`| NCP | Connection |
| - |-| Partial | `Fail (no shared cipher)` |
- | AES-256-CBC |-| Partial | **[[span(style=color: #007000, OK. AES-256-CBC )]** |
+ | AES-256-CBC |-| Partial | **<span style=color:#007000>OK. AES-256-CBC</span>** |
| BF-CBC |-| Partial | `Fail (no shared cipher)` |
##### Client version 2.3
@@ 393,7 388,7 @@
|-|-|-|
| `--cipher` | NCP | Connection |
| - | No | `Fail (no shared cipher)` |
- | AES-256-CBC | No | **[[span(style=color: #007000, OK. AES-256-CBC )]** |
+ | AES-256-CBC | No | **<span style=color:#007000>OK. AES-256-CBC</span>** |
| BF-CBC | No | `Fail (no shared cipher)` |
##### Client version 2.2
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9