Tjaaa... was gibts fuer Moeglichkeiten?
Du koenntest also versuchen ein Downgrade des Controllers auf 5.5.20 zu machen oder aber die SSL-Redirection im Controller ausschalten - ich habe aber keine Ahnung wie (und ob ueberhaupt) das zu bewerkstelligen waere.
Du koenntest auch in das cfg File des Controllers gucken ob da irgendwelche sonderbaren HTTPS-Konfigurationen vorgenommen wurden bzw schauen ob man eventuelle Aenderungen im Controller-Upgrade da wieder wegkonfigurieren koennte.
Du koenntest schlussendlich auch noch sslscan auf deinem Edomi installieren (das kommt allerdings aus dem EPEL-Repo, wenn Du das eingebunden hast genuegt ein simples "yum install sslscan") und auf Deinen Controller loslassen. Das koenntest Du dann mit meinem Ergebnis vergleichen und gucken wo da Unterschiede liegen und welche genau das sind.
Meine sslscan Ausgabe (Controller 5.5.20 auf CentOS 6) sieht so aus (die "Supported Client Ciphers" hab ich mal draussen gelassen, die interessieren hier nicht wirklich):
- Es liegt an einer geaenderten API? Wohl nicht - zumindest in erster Instanz nicht - denn soweit kommt der LBS gar nicht erst, bereits die SSL-Verbindung schlaegt fehl.
- Es liegt an einem ungueltigen Zertifkat? Eher unwahrscheinlich, denn im LBS sind die Curl-Optionen SSL_VERIFY_HOST und SSL_VERIFY_PEER beide auf "false" gesetzt, damit sind quasi alle SSL-Validierungen deaktiviert.
- Es liegt am Cloudkey? Auch unwahrscheinlich, ist ja kein Hardware-Problem?
- Es liegt am Controller? Das ist wohl am "vermutlichsten" der Fall. Bereits beim letzten Update gab es Aenderungen im SSL-Server die diese curl/nss Updates erforderlich machten.
When you have excluded the impossible, whatever remains, however improbable, must be the truth.
Du koenntest auch in das cfg File des Controllers gucken ob da irgendwelche sonderbaren HTTPS-Konfigurationen vorgenommen wurden bzw schauen ob man eventuelle Aenderungen im Controller-Upgrade da wieder wegkonfigurieren koennte.
Du koenntest schlussendlich auch noch sslscan auf deinem Edomi installieren (das kommt allerdings aus dem EPEL-Repo, wenn Du das eingebunden hast genuegt ein simples "yum install sslscan") und auf Deinen Controller loslassen. Das koenntest Du dann mit meinem Ergebnis vergleichen und gucken wo da Unterschiede liegen und welche genau das sind.
Meine sslscan Ausgabe (Controller 5.5.20 auf CentOS 6) sieht so aus (die "Supported Client Ciphers" hab ich mal draussen gelassen, die interessieren hier nicht wirklich):
Code:
_ ___ ___| |___ ___ __ _ _ __ / __/ __| / __|/ __/ _` | '_ \ \__ \__ \ \__ \ (_| (_| | | | | |___/___/_|___/\___\__,_|_| |_| sslscan version 1.10.2 OpenSSL 1.0.1e-fips 11 Feb 2013 Testing SSL server blahblah.localnet on port 8443 Supported Client Cipher(s): ... Supported Server Cipher(s): Rejected SSLv2 128 bits DES-CBC3-MD5 Rejected SSLv2 128 bits IDEA-CBC-MD5 Rejected SSLv2 128 bits RC2-CBC-MD5 Rejected SSLv2 128 bits RC4-MD5 Failed SSLv3 256 bits ECDHE-RSA-AES256-GCM-SHA384 Failed SSLv3 256 bits ECDHE-ECDSA-AES256-GCM-SHA384 Failed SSLv3 256 bits ECDHE-RSA-AES256-SHA384 Failed SSLv3 256 bits ECDHE-ECDSA-AES256-SHA384 Failed SSLv3 256 bits ECDHE-RSA-AES256-SHA Failed SSLv3 256 bits ECDHE-ECDSA-AES256-SHA Failed SSLv3 256 bits DHE-DSS-AES256-GCM-SHA384 Failed SSLv3 256 bits DHE-RSA-AES256-GCM-SHA384 Failed SSLv3 256 bits DHE-RSA-AES256-SHA256 Failed SSLv3 256 bits DHE-DSS-AES256-SHA256 Failed SSLv3 256 bits DHE-RSA-AES256-SHA Failed SSLv3 256 bits DHE-DSS-AES256-SHA Failed SSLv3 256 bits DHE-RSA-CAMELLIA256-SHA Failed SSLv3 256 bits DHE-DSS-CAMELLIA256-SHA Failed SSLv3 256 bits AECDH-AES256-SHA Failed SSLv3 256 bits ADH-AES256-GCM-SHA384 Failed SSLv3 256 bits ADH-AES256-SHA256 Failed SSLv3 256 bits ADH-AES256-SHA Failed SSLv3 256 bits ADH-CAMELLIA256-SHA Failed SSLv3 256 bits ECDH-RSA-AES256-GCM-SHA384 Failed SSLv3 256 bits ECDH-ECDSA-AES256-GCM-SHA384 Failed SSLv3 256 bits ECDH-RSA-AES256-SHA384 Failed SSLv3 256 bits ECDH-ECDSA-AES256-SHA384 Failed SSLv3 256 bits ECDH-RSA-AES256-SHA Failed SSLv3 256 bits ECDH-ECDSA-AES256-SHA Failed SSLv3 256 bits AES256-GCM-SHA384 Failed SSLv3 256 bits AES256-SHA256 Failed SSLv3 256 bits AES256-SHA Failed SSLv3 256 bits CAMELLIA256-SHA Failed SSLv3 256 bits PSK-AES256-CBC-SHA Failed SSLv3 128 bits ECDHE-RSA-AES128-GCM-SHA256 Failed SSLv3 128 bits ECDHE-ECDSA-AES128-GCM-SHA256 Failed SSLv3 128 bits ECDHE-RSA-AES128-SHA256 Failed SSLv3 128 bits ECDHE-ECDSA-AES128-SHA256 Failed SSLv3 128 bits ECDHE-RSA-AES128-SHA Failed SSLv3 128 bits ECDHE-ECDSA-AES128-SHA Failed SSLv3 128 bits DHE-DSS-AES128-GCM-SHA256 Failed SSLv3 128 bits DHE-RSA-AES128-GCM-SHA256 Failed SSLv3 128 bits DHE-RSA-AES128-SHA256 Failed SSLv3 128 bits DHE-DSS-AES128-SHA256 Failed SSLv3 128 bits DHE-RSA-AES128-SHA Failed SSLv3 128 bits DHE-DSS-AES128-SHA Failed SSLv3 128 bits ECDHE-RSA-DES-CBC3-SHA Failed SSLv3 128 bits ECDHE-ECDSA-DES-CBC3-SHA Failed SSLv3 128 bits DHE-RSA-SEED-SHA Failed SSLv3 128 bits DHE-DSS-SEED-SHA Failed SSLv3 128 bits DHE-RSA-CAMELLIA128-SHA Failed SSLv3 128 bits DHE-DSS-CAMELLIA128-SHA Failed SSLv3 128 bits EDH-RSA-DES-CBC3-SHA Failed SSLv3 128 bits EDH-DSS-DES-CBC3-SHA Failed SSLv3 128 bits AECDH-AES128-SHA Failed SSLv3 128 bits ADH-AES128-GCM-SHA256 Failed SSLv3 128 bits ADH-AES128-SHA256 Failed SSLv3 128 bits ADH-AES128-SHA Failed SSLv3 128 bits AECDH-DES-CBC3-SHA Failed SSLv3 128 bits ADH-SEED-SHA Failed SSLv3 128 bits ADH-CAMELLIA128-SHA Failed SSLv3 128 bits ADH-DES-CBC3-SHA Failed SSLv3 128 bits ECDH-RSA-AES128-GCM-SHA256 Failed SSLv3 128 bits ECDH-ECDSA-AES128-GCM-SHA256 Failed SSLv3 128 bits ECDH-RSA-AES128-SHA256 Failed SSLv3 128 bits ECDH-ECDSA-AES128-SHA256 Failed SSLv3 128 bits ECDH-RSA-AES128-SHA Failed SSLv3 128 bits ECDH-ECDSA-AES128-SHA Failed SSLv3 128 bits ECDH-RSA-DES-CBC3-SHA Failed SSLv3 128 bits ECDH-ECDSA-DES-CBC3-SHA Failed SSLv3 128 bits AES128-GCM-SHA256 Failed SSLv3 128 bits AES128-SHA256 Failed SSLv3 128 bits AES128-SHA Failed SSLv3 128 bits SEED-SHA Failed SSLv3 128 bits CAMELLIA128-SHA Failed SSLv3 128 bits DES-CBC3-SHA Failed SSLv3 128 bits IDEA-CBC-SHA Failed SSLv3 128 bits PSK-AES128-CBC-SHA Failed SSLv3 128 bits PSK-3DES-EDE-CBC-SHA Failed SSLv3 128 bits KRB5-IDEA-CBC-SHA Failed SSLv3 128 bits KRB5-DES-CBC3-SHA Failed SSLv3 128 bits KRB5-IDEA-CBC-MD5 Failed SSLv3 128 bits KRB5-DES-CBC3-MD5 Failed SSLv3 128 bits ECDHE-RSA-RC4-SHA Failed SSLv3 128 bits ECDHE-ECDSA-RC4-SHA Failed SSLv3 128 bits AECDH-RC4-SHA Failed SSLv3 128 bits ADH-RC4-MD5 Failed SSLv3 128 bits ECDH-RSA-RC4-SHA Failed SSLv3 128 bits ECDH-ECDSA-RC4-SHA Failed SSLv3 128 bits RC4-SHA Failed SSLv3 128 bits RC4-MD5 Failed SSLv3 128 bits PSK-RC4-SHA Failed SSLv3 128 bits KRB5-RC4-SHA Failed SSLv3 128 bits KRB5-RC4-MD5 Failed SSLv3 56 bits EDH-RSA-DES-CBC-SHA Failed SSLv3 56 bits EDH-DSS-DES-CBC-SHA Failed SSLv3 56 bits ADH-DES-CBC-SHA Failed SSLv3 56 bits DES-CBC-SHA Failed SSLv3 56 bits KRB5-DES-CBC-SHA Failed SSLv3 56 bits KRB5-DES-CBC-MD5 Failed SSLv3 40 bits EXP-EDH-RSA-DES-CBC-SHA Failed SSLv3 40 bits EXP-EDH-DSS-DES-CBC-SHA Failed SSLv3 40 bits EXP-ADH-DES-CBC-SHA Failed SSLv3 40 bits EXP-DES-CBC-SHA Failed SSLv3 40 bits EXP-RC2-CBC-MD5 Failed SSLv3 40 bits EXP-KRB5-RC2-CBC-SHA Failed SSLv3 40 bits EXP-KRB5-DES-CBC-SHA Failed SSLv3 40 bits EXP-KRB5-RC2-CBC-MD5 Failed SSLv3 40 bits EXP-KRB5-DES-CBC-MD5 Failed SSLv3 40 bits EXP-ADH-RC4-MD5 Failed SSLv3 40 bits EXP-RC4-MD5 Failed SSLv3 40 bits EXP-KRB5-RC4-SHA Failed SSLv3 40 bits EXP-KRB5-RC4-MD5 Failed SSLv3 0 bits ECDHE-RSA-NULL-SHA Failed SSLv3 0 bits ECDHE-ECDSA-NULL-SHA Failed SSLv3 0 bits AECDH-NULL-SHA Failed SSLv3 0 bits ECDH-RSA-NULL-SHA Failed SSLv3 0 bits ECDH-ECDSA-NULL-SHA Failed SSLv3 0 bits NULL-SHA256 Failed SSLv3 0 bits NULL-SHA Failed SSLv3 0 bits NULL-MD5 Failed TLSv1 256 bits ECDHE-RSA-AES256-GCM-SHA384 Failed TLSv1 256 bits ECDHE-ECDSA-AES256-GCM-SHA384 Failed TLSv1 256 bits ECDHE-RSA-AES256-SHA384 Failed TLSv1 256 bits ECDHE-ECDSA-AES256-SHA384 Rejected TLSv1 256 bits ECDHE-RSA-AES256-SHA Rejected TLSv1 256 bits ECDHE-ECDSA-AES256-SHA Failed TLSv1 256 bits DHE-DSS-AES256-GCM-SHA384 Failed TLSv1 256 bits DHE-RSA-AES256-GCM-SHA384 Failed TLSv1 256 bits DHE-RSA-AES256-SHA256 Failed TLSv1 256 bits DHE-DSS-AES256-SHA256 Rejected TLSv1 256 bits DHE-RSA-AES256-SHA Rejected TLSv1 256 bits DHE-DSS-AES256-SHA Rejected TLSv1 256 bits DHE-RSA-CAMELLIA256-SHA Rejected TLSv1 256 bits DHE-DSS-CAMELLIA256-SHA Rejected TLSv1 256 bits AECDH-AES256-SHA Failed TLSv1 256 bits ADH-AES256-GCM-SHA384 Failed TLSv1 256 bits ADH-AES256-SHA256 Rejected TLSv1 256 bits ADH-AES256-SHA Rejected TLSv1 256 bits ADH-CAMELLIA256-SHA Failed TLSv1 256 bits ECDH-RSA-AES256-GCM-SHA384 Failed TLSv1 256 bits ECDH-ECDSA-AES256-GCM-SHA384 Failed TLSv1 256 bits ECDH-RSA-AES256-SHA384 Failed TLSv1 256 bits ECDH-ECDSA-AES256-SHA384 Rejected TLSv1 256 bits ECDH-RSA-AES256-SHA Rejected TLSv1 256 bits ECDH-ECDSA-AES256-SHA Failed TLSv1 256 bits AES256-GCM-SHA384 Failed TLSv1 256 bits AES256-SHA256 Rejected TLSv1 256 bits AES256-SHA Rejected TLSv1 256 bits CAMELLIA256-SHA Failed TLSv1 256 bits PSK-AES256-CBC-SHA Failed TLSv1 128 bits ECDHE-RSA-AES128-GCM-SHA256 Failed TLSv1 128 bits ECDHE-ECDSA-AES128-GCM-SHA256 Failed TLSv1 128 bits ECDHE-RSA-AES128-SHA256 Failed TLSv1 128 bits ECDHE-ECDSA-AES128-SHA256 Rejected TLSv1 128 bits ECDHE-RSA-AES128-SHA Rejected TLSv1 128 bits ECDHE-ECDSA-AES128-SHA Failed TLSv1 128 bits DHE-DSS-AES128-GCM-SHA256 Failed TLSv1 128 bits DHE-RSA-AES128-GCM-SHA256 Failed TLSv1 128 bits DHE-RSA-AES128-SHA256 Failed TLSv1 128 bits DHE-DSS-AES128-SHA256 Rejected TLSv1 128 bits DHE-RSA-AES128-SHA Rejected TLSv1 128 bits DHE-DSS-AES128-SHA Rejected TLSv1 128 bits ECDHE-RSA-DES-CBC3-SHA Rejected TLSv1 128 bits ECDHE-ECDSA-DES-CBC3-SHA Rejected TLSv1 128 bits DHE-RSA-SEED-SHA Rejected TLSv1 128 bits DHE-DSS-SEED-SHA Rejected TLSv1 128 bits DHE-RSA-CAMELLIA128-SHA Rejected TLSv1 128 bits DHE-DSS-CAMELLIA128-SHA Rejected TLSv1 128 bits EDH-RSA-DES-CBC3-SHA Rejected TLSv1 128 bits EDH-DSS-DES-CBC3-SHA Rejected TLSv1 128 bits AECDH-AES128-SHA Failed TLSv1 128 bits ADH-AES128-GCM-SHA256 Failed TLSv1 128 bits ADH-AES128-SHA256 Rejected TLSv1 128 bits ADH-AES128-SHA Rejected TLSv1 128 bits AECDH-DES-CBC3-SHA Rejected TLSv1 128 bits ADH-SEED-SHA Rejected TLSv1 128 bits ADH-CAMELLIA128-SHA Rejected TLSv1 128 bits ADH-DES-CBC3-SHA Failed TLSv1 128 bits ECDH-RSA-AES128-GCM-SHA256 Failed TLSv1 128 bits ECDH-ECDSA-AES128-GCM-SHA256 Failed TLSv1 128 bits ECDH-RSA-AES128-SHA256 Failed TLSv1 128 bits ECDH-ECDSA-AES128-SHA256 Rejected TLSv1 128 bits ECDH-RSA-AES128-SHA Rejected TLSv1 128 bits ECDH-ECDSA-AES128-SHA Rejected TLSv1 128 bits ECDH-RSA-DES-CBC3-SHA Rejected TLSv1 128 bits ECDH-ECDSA-DES-CBC3-SHA Failed TLSv1 128 bits AES128-GCM-SHA256 Failed TLSv1 128 bits AES128-SHA256 Rejected TLSv1 128 bits AES128-SHA Rejected TLSv1 128 bits SEED-SHA Rejected TLSv1 128 bits CAMELLIA128-SHA Rejected TLSv1 128 bits DES-CBC3-SHA Rejected TLSv1 128 bits IDEA-CBC-SHA Failed TLSv1 128 bits PSK-AES128-CBC-SHA Failed TLSv1 128 bits PSK-3DES-EDE-CBC-SHA Failed TLSv1 128 bits KRB5-IDEA-CBC-SHA Failed TLSv1 128 bits KRB5-DES-CBC3-SHA Failed TLSv1 128 bits KRB5-IDEA-CBC-MD5 Failed TLSv1 128 bits KRB5-DES-CBC3-MD5 Rejected TLSv1 128 bits ECDHE-RSA-RC4-SHA Rejected TLSv1 128 bits ECDHE-ECDSA-RC4-SHA Rejected TLSv1 128 bits AECDH-RC4-SHA Rejected TLSv1 128 bits ADH-RC4-MD5 Rejected TLSv1 128 bits ECDH-RSA-RC4-SHA Rejected TLSv1 128 bits ECDH-ECDSA-RC4-SHA Rejected TLSv1 128 bits RC4-SHA Rejected TLSv1 128 bits RC4-MD5 Failed TLSv1 128 bits PSK-RC4-SHA Failed TLSv1 128 bits KRB5-RC4-SHA Failed TLSv1 128 bits KRB5-RC4-MD5 Rejected TLSv1 56 bits EDH-RSA-DES-CBC-SHA Rejected TLSv1 56 bits EDH-DSS-DES-CBC-SHA Rejected TLSv1 56 bits ADH-DES-CBC-SHA Rejected TLSv1 56 bits DES-CBC-SHA Failed TLSv1 56 bits KRB5-DES-CBC-SHA Failed TLSv1 56 bits KRB5-DES-CBC-MD5 Rejected TLSv1 40 bits EXP-EDH-RSA-DES-CBC-SHA Rejected TLSv1 40 bits EXP-EDH-DSS-DES-CBC-SHA Rejected TLSv1 40 bits EXP-ADH-DES-CBC-SHA Rejected TLSv1 40 bits EXP-DES-CBC-SHA Rejected TLSv1 40 bits EXP-RC2-CBC-MD5 Failed TLSv1 40 bits EXP-KRB5-RC2-CBC-SHA Failed TLSv1 40 bits EXP-KRB5-DES-CBC-SHA Failed TLSv1 40 bits EXP-KRB5-RC2-CBC-MD5 Failed TLSv1 40 bits EXP-KRB5-DES-CBC-MD5 Rejected TLSv1 40 bits EXP-ADH-RC4-MD5 Rejected TLSv1 40 bits EXP-RC4-MD5 Failed TLSv1 40 bits EXP-KRB5-RC4-SHA Failed TLSv1 40 bits EXP-KRB5-RC4-MD5 Rejected TLSv1 0 bits ECDHE-RSA-NULL-SHA Rejected TLSv1 0 bits ECDHE-ECDSA-NULL-SHA Rejected TLSv1 0 bits AECDH-NULL-SHA Rejected TLSv1 0 bits ECDH-RSA-NULL-SHA Rejected TLSv1 0 bits ECDH-ECDSA-NULL-SHA Failed TLSv1 0 bits NULL-SHA256 Rejected TLSv1 0 bits NULL-SHA Rejected TLSv1 0 bits NULL-MD5 Failed TLS11 256 bits ECDHE-RSA-AES256-GCM-SHA384 Failed TLS11 256 bits ECDHE-ECDSA-AES256-GCM-SHA384 Failed TLS11 256 bits ECDHE-RSA-AES256-SHA384 Failed TLS11 256 bits ECDHE-ECDSA-AES256-SHA384 Rejected TLS11 256 bits ECDHE-RSA-AES256-SHA Rejected TLS11 256 bits ECDHE-ECDSA-AES256-SHA Failed TLS11 256 bits DHE-DSS-AES256-GCM-SHA384 Failed TLS11 256 bits DHE-RSA-AES256-GCM-SHA384 Failed TLS11 256 bits DHE-RSA-AES256-SHA256 Failed TLS11 256 bits DHE-DSS-AES256-SHA256 Rejected TLS11 256 bits DHE-RSA-AES256-SHA Rejected TLS11 256 bits DHE-DSS-AES256-SHA Rejected TLS11 256 bits DHE-RSA-CAMELLIA256-SHA Rejected TLS11 256 bits DHE-DSS-CAMELLIA256-SHA Rejected TLS11 256 bits AECDH-AES256-SHA Failed TLS11 256 bits ADH-AES256-GCM-SHA384 Failed TLS11 256 bits ADH-AES256-SHA256 Rejected TLS11 256 bits ADH-AES256-SHA Rejected TLS11 256 bits ADH-CAMELLIA256-SHA Failed TLS11 256 bits ECDH-RSA-AES256-GCM-SHA384 Failed TLS11 256 bits ECDH-ECDSA-AES256-GCM-SHA384 Failed TLS11 256 bits ECDH-RSA-AES256-SHA384 Failed TLS11 256 bits ECDH-ECDSA-AES256-SHA384 Rejected TLS11 256 bits ECDH-RSA-AES256-SHA Rejected TLS11 256 bits ECDH-ECDSA-AES256-SHA Failed TLS11 256 bits AES256-GCM-SHA384 Failed TLS11 256 bits AES256-SHA256 Rejected TLS11 256 bits AES256-SHA Rejected TLS11 256 bits CAMELLIA256-SHA Failed TLS11 256 bits PSK-AES256-CBC-SHA Failed TLS11 128 bits ECDHE-RSA-AES128-GCM-SHA256 Failed TLS11 128 bits ECDHE-ECDSA-AES128-GCM-SHA256 Failed TLS11 128 bits ECDHE-RSA-AES128-SHA256 Failed TLS11 128 bits ECDHE-ECDSA-AES128-SHA256 Accepted TLS11 128 bits ECDHE-RSA-AES128-SHA Rejected TLS11 128 bits ECDHE-ECDSA-AES128-SHA Failed TLS11 128 bits DHE-DSS-AES128-GCM-SHA256 Failed TLS11 128 bits DHE-RSA-AES128-GCM-SHA256 Failed TLS11 128 bits DHE-RSA-AES128-SHA256 Failed TLS11 128 bits DHE-DSS-AES128-SHA256 Rejected TLS11 128 bits DHE-RSA-AES128-SHA Rejected TLS11 128 bits DHE-DSS-AES128-SHA Rejected TLS11 128 bits ECDHE-RSA-DES-CBC3-SHA Rejected TLS11 128 bits ECDHE-ECDSA-DES-CBC3-SHA Rejected TLS11 128 bits DHE-RSA-SEED-SHA Rejected TLS11 128 bits DHE-DSS-SEED-SHA Rejected TLS11 128 bits DHE-RSA-CAMELLIA128-SHA Rejected TLS11 128 bits DHE-DSS-CAMELLIA128-SHA Rejected TLS11 128 bits EDH-RSA-DES-CBC3-SHA Rejected TLS11 128 bits EDH-DSS-DES-CBC3-SHA Rejected TLS11 128 bits AECDH-AES128-SHA Failed TLS11 128 bits ADH-AES128-GCM-SHA256 Failed TLS11 128 bits ADH-AES128-SHA256 Rejected TLS11 128 bits ADH-AES128-SHA Rejected TLS11 128 bits AECDH-DES-CBC3-SHA Rejected TLS11 128 bits ADH-SEED-SHA Rejected TLS11 128 bits ADH-CAMELLIA128-SHA Rejected TLS11 128 bits ADH-DES-CBC3-SHA Failed TLS11 128 bits ECDH-RSA-AES128-GCM-SHA256 Failed TLS11 128 bits ECDH-ECDSA-AES128-GCM-SHA256 Failed TLS11 128 bits ECDH-RSA-AES128-SHA256 Failed TLS11 128 bits ECDH-ECDSA-AES128-SHA256 Rejected TLS11 128 bits ECDH-RSA-AES128-SHA Rejected TLS11 128 bits ECDH-ECDSA-AES128-SHA Rejected TLS11 128 bits ECDH-RSA-DES-CBC3-SHA Rejected TLS11 128 bits ECDH-ECDSA-DES-CBC3-SHA Failed TLS11 128 bits AES128-GCM-SHA256 Failed TLS11 128 bits AES128-SHA256 Rejected TLS11 128 bits AES128-SHA Rejected TLS11 128 bits SEED-SHA Rejected TLS11 128 bits CAMELLIA128-SHA Rejected TLS11 128 bits DES-CBC3-SHA Rejected TLS11 128 bits IDEA-CBC-SHA Failed TLS11 128 bits PSK-AES128-CBC-SHA Failed TLS11 128 bits PSK-3DES-EDE-CBC-SHA Failed TLS11 128 bits KRB5-IDEA-CBC-SHA Failed TLS11 128 bits KRB5-DES-CBC3-SHA Failed TLS11 128 bits KRB5-IDEA-CBC-MD5 Failed TLS11 128 bits KRB5-DES-CBC3-MD5 Rejected TLS11 128 bits ECDHE-RSA-RC4-SHA Rejected TLS11 128 bits ECDHE-ECDSA-RC4-SHA Rejected TLS11 128 bits AECDH-RC4-SHA Rejected TLS11 128 bits ADH-RC4-MD5 Rejected TLS11 128 bits ECDH-RSA-RC4-SHA Rejected TLS11 128 bits ECDH-ECDSA-RC4-SHA Rejected TLS11 128 bits RC4-SHA Rejected TLS11 128 bits RC4-MD5 Failed TLS11 128 bits PSK-RC4-SHA Failed TLS11 128 bits KRB5-RC4-SHA Failed TLS11 128 bits KRB5-RC4-MD5 Rejected TLS11 56 bits EDH-RSA-DES-CBC-SHA Rejected TLS11 56 bits EDH-DSS-DES-CBC-SHA Rejected TLS11 56 bits ADH-DES-CBC-SHA Rejected TLS11 56 bits DES-CBC-SHA Failed TLS11 56 bits KRB5-DES-CBC-SHA Failed TLS11 56 bits KRB5-DES-CBC-MD5 Rejected TLS11 40 bits EXP-EDH-RSA-DES-CBC-SHA Rejected TLS11 40 bits EXP-EDH-DSS-DES-CBC-SHA Rejected TLS11 40 bits EXP-ADH-DES-CBC-SHA Rejected TLS11 40 bits EXP-DES-CBC-SHA Rejected TLS11 40 bits EXP-RC2-CBC-MD5 Failed TLS11 40 bits EXP-KRB5-RC2-CBC-SHA Failed TLS11 40 bits EXP-KRB5-DES-CBC-SHA Failed TLS11 40 bits EXP-KRB5-RC2-CBC-MD5 Failed TLS11 40 bits EXP-KRB5-DES-CBC-MD5 Rejected TLS11 40 bits EXP-ADH-RC4-MD5 Rejected TLS11 40 bits EXP-RC4-MD5 Failed TLS11 40 bits EXP-KRB5-RC4-SHA Failed TLS11 40 bits EXP-KRB5-RC4-MD5 Rejected TLS11 0 bits ECDHE-RSA-NULL-SHA Rejected TLS11 0 bits ECDHE-ECDSA-NULL-SHA Rejected TLS11 0 bits AECDH-NULL-SHA Rejected TLS11 0 bits ECDH-RSA-NULL-SHA Rejected TLS11 0 bits ECDH-ECDSA-NULL-SHA Failed TLS11 0 bits NULL-SHA256 Rejected TLS11 0 bits NULL-SHA Rejected TLS11 0 bits NULL-MD5 Rejected TLS12 256 bits ECDHE-RSA-AES256-GCM-SHA384 Rejected TLS12 256 bits ECDHE-ECDSA-AES256-GCM-SHA384 Rejected TLS12 256 bits ECDHE-RSA-AES256-SHA384 Rejected TLS12 256 bits ECDHE-ECDSA-AES256-SHA384 Rejected TLS12 256 bits ECDHE-RSA-AES256-SHA Rejected TLS12 256 bits ECDHE-ECDSA-AES256-SHA Rejected TLS12 256 bits DHE-DSS-AES256-GCM-SHA384 Rejected TLS12 256 bits DHE-RSA-AES256-GCM-SHA384 Rejected TLS12 256 bits DHE-RSA-AES256-SHA256 Rejected TLS12 256 bits DHE-DSS-AES256-SHA256 Rejected TLS12 256 bits DHE-RSA-AES256-SHA Rejected TLS12 256 bits DHE-DSS-AES256-SHA Rejected TLS12 256 bits DHE-RSA-CAMELLIA256-SHA Rejected TLS12 256 bits DHE-DSS-CAMELLIA256-SHA Rejected TLS12 256 bits AECDH-AES256-SHA Rejected TLS12 256 bits ADH-AES256-GCM-SHA384 Rejected TLS12 256 bits ADH-AES256-SHA256 Rejected TLS12 256 bits ADH-AES256-SHA Rejected TLS12 256 bits ADH-CAMELLIA256-SHA Rejected TLS12 256 bits ECDH-RSA-AES256-GCM-SHA384 Rejected TLS12 256 bits ECDH-ECDSA-AES256-GCM-SHA384 Rejected TLS12 256 bits ECDH-RSA-AES256-SHA384 Rejected TLS12 256 bits ECDH-ECDSA-AES256-SHA384 Rejected TLS12 256 bits ECDH-RSA-AES256-SHA Rejected TLS12 256 bits ECDH-ECDSA-AES256-SHA Rejected TLS12 256 bits AES256-GCM-SHA384 Rejected TLS12 256 bits AES256-SHA256 Rejected TLS12 256 bits AES256-SHA Rejected TLS12 256 bits CAMELLIA256-SHA Failed TLS12 256 bits PSK-AES256-CBC-SHA Rejected TLS12 128 bits ECDHE-RSA-AES128-GCM-SHA256 Rejected TLS12 128 bits ECDHE-ECDSA-AES128-GCM-SHA256 Accepted TLS12 128 bits ECDHE-RSA-AES128-SHA256 Rejected TLS12 128 bits ECDHE-ECDSA-AES128-SHA256 Accepted TLS12 128 bits ECDHE-RSA-AES128-SHA Rejected TLS12 128 bits ECDHE-ECDSA-AES128-SHA Rejected TLS12 128 bits DHE-DSS-AES128-GCM-SHA256 Rejected TLS12 128 bits DHE-RSA-AES128-GCM-SHA256 Rejected TLS12 128 bits DHE-RSA-AES128-SHA256 Rejected TLS12 128 bits DHE-DSS-AES128-SHA256 Rejected TLS12 128 bits DHE-RSA-AES128-SHA Rejected TLS12 128 bits DHE-DSS-AES128-SHA Rejected TLS12 128 bits ECDHE-RSA-DES-CBC3-SHA Rejected TLS12 128 bits ECDHE-ECDSA-DES-CBC3-SHA Rejected TLS12 128 bits DHE-RSA-SEED-SHA Rejected TLS12 128 bits DHE-DSS-SEED-SHA Rejected TLS12 128 bits DHE-RSA-CAMELLIA128-SHA Rejected TLS12 128 bits DHE-DSS-CAMELLIA128-SHA Rejected TLS12 128 bits EDH-RSA-DES-CBC3-SHA Rejected TLS12 128 bits EDH-DSS-DES-CBC3-SHA Rejected TLS12 128 bits AECDH-AES128-SHA Rejected TLS12 128 bits ADH-AES128-GCM-SHA256 Rejected TLS12 128 bits ADH-AES128-SHA256 Rejected TLS12 128 bits ADH-AES128-SHA Rejected TLS12 128 bits AECDH-DES-CBC3-SHA Rejected TLS12 128 bits ADH-SEED-SHA Rejected TLS12 128 bits ADH-CAMELLIA128-SHA Rejected TLS12 128 bits ADH-DES-CBC3-SHA Rejected TLS12 128 bits ECDH-RSA-AES128-GCM-SHA256 Rejected TLS12 128 bits ECDH-ECDSA-AES128-GCM-SHA256 Rejected TLS12 128 bits ECDH-RSA-AES128-SHA256 Rejected TLS12 128 bits ECDH-ECDSA-AES128-SHA256 Rejected TLS12 128 bits ECDH-RSA-AES128-SHA Rejected TLS12 128 bits ECDH-ECDSA-AES128-SHA Rejected TLS12 128 bits ECDH-RSA-DES-CBC3-SHA Rejected TLS12 128 bits ECDH-ECDSA-DES-CBC3-SHA Rejected TLS12 128 bits AES128-GCM-SHA256 Rejected TLS12 128 bits AES128-SHA256 Rejected TLS12 128 bits AES128-SHA Rejected TLS12 128 bits SEED-SHA Rejected TLS12 128 bits CAMELLIA128-SHA Rejected TLS12 128 bits DES-CBC3-SHA Rejected TLS12 128 bits IDEA-CBC-SHA Failed TLS12 128 bits PSK-AES128-CBC-SHA Failed TLS12 128 bits PSK-3DES-EDE-CBC-SHA Failed TLS12 128 bits KRB5-IDEA-CBC-SHA Failed TLS12 128 bits KRB5-DES-CBC3-SHA Failed TLS12 128 bits KRB5-IDEA-CBC-MD5 Failed TLS12 128 bits KRB5-DES-CBC3-MD5 Rejected TLS12 128 bits ECDHE-RSA-RC4-SHA Rejected TLS12 128 bits ECDHE-ECDSA-RC4-SHA Rejected TLS12 128 bits AECDH-RC4-SHA Rejected TLS12 128 bits ADH-RC4-MD5 Rejected TLS12 128 bits ECDH-RSA-RC4-SHA Rejected TLS12 128 bits ECDH-ECDSA-RC4-SHA Rejected TLS12 128 bits RC4-SHA Rejected TLS12 128 bits RC4-MD5 Failed TLS12 128 bits PSK-RC4-SHA Failed TLS12 128 bits KRB5-RC4-SHA Failed TLS12 128 bits KRB5-RC4-MD5 Rejected TLS12 56 bits EDH-RSA-DES-CBC-SHA Rejected TLS12 56 bits EDH-DSS-DES-CBC-SHA Rejected TLS12 56 bits ADH-DES-CBC-SHA Rejected TLS12 56 bits DES-CBC-SHA Failed TLS12 56 bits KRB5-DES-CBC-SHA Failed TLS12 56 bits KRB5-DES-CBC-MD5 Rejected TLS12 40 bits EXP-EDH-RSA-DES-CBC-SHA Rejected TLS12 40 bits EXP-EDH-DSS-DES-CBC-SHA Rejected TLS12 40 bits EXP-ADH-DES-CBC-SHA Rejected TLS12 40 bits EXP-DES-CBC-SHA Rejected TLS12 40 bits EXP-RC2-CBC-MD5 Failed TLS12 40 bits EXP-KRB5-RC2-CBC-SHA Failed TLS12 40 bits EXP-KRB5-DES-CBC-SHA Failed TLS12 40 bits EXP-KRB5-RC2-CBC-MD5 Failed TLS12 40 bits EXP-KRB5-DES-CBC-MD5 Rejected TLS12 40 bits EXP-ADH-RC4-MD5 Rejected TLS12 40 bits EXP-RC4-MD5 Failed TLS12 40 bits EXP-KRB5-RC4-SHA Failed TLS12 40 bits EXP-KRB5-RC4-MD5 Rejected TLS12 0 bits ECDHE-RSA-NULL-SHA Rejected TLS12 0 bits ECDHE-ECDSA-NULL-SHA Rejected TLS12 0 bits AECDH-NULL-SHA Rejected TLS12 0 bits ECDH-RSA-NULL-SHA Rejected TLS12 0 bits ECDH-ECDSA-NULL-SHA Rejected TLS12 0 bits NULL-SHA256 Rejected TLS12 0 bits NULL-SHA Rejected TLS12 0 bits NULL-MD5 Preferred Server Cipher(s): SSLv2 0 bits (NONE) TLSv1 0 bits (NONE) TLS11 128 bits ECDHE-RSA-AES128-SHA TLS12 128 bits ECDHE-RSA-AES128-SHA256 SSL Certificate: Certificate blob: -----BEGIN CERTIFICATE----- MIIDPDCCAiSgAwIBAgIEVnn0CjANBgkqhkiG9w0BAQsFADBgMQswCQYDVQQGEwJV UzELMAkGA1UECBMCQ0ExETAPBgNVBAcTCFNhbiBKb3NlMREwDwYDVQQKEwh1Ym50 LmNvbTEOMAwGA1UECxMFVW5pRmkxDjAMBgNVBAMTBVVuaUZpMB4XDTE1MTIyMzAx MDgyNloXDTI1MTIyMDAxMDgyNlowYDELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNB MREwDwYDVQQHEwhTYW4gSm9zZTERMA8GA1UEChMIdWJudC5jb20xDjAMBgNVBAsT BVVuaUZpMQ4wDAYDVQQDEwVVbmlGaTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAIyYbT1hS8Pc2lnmn+yVDmHlDepdmp5Rr9GSn31pYjgOcdUINZ/CuCd6 5BRGjHPoflAVRWfZ8/TiQCxP6UIK3m256lF1kO7W8dHqudtUXbdYeSeizks4flCG 2Ai751/XD+2+a69bqRXXYELI9nCDCIAkOmEb2FIfqLhzuwNDeWP1x9va87frb1AP S9yveMdAo175Vcu5SdrqV4poAzrJnBTjBIqJMdX0uEK/8cCGLI5DaykdUTax27Mv ++p9RZhK0g/vyG2UIBs1zLpAmUP/WydKoPdpLmSMqI8oRaI4lJ//P6rbCriy0tPn 3MDPY5wxnFxCk879vLWiyMd29TFHGKMCAwEAATANBgkqhkiG9w0BAQsFAAOCAQEA L2u7wWQGEG2d2doXDIKU8YJ+tdNdvw5IVi9tmGtJxLM7muUkoMw4s6q/JazTHhe6 IIMSix++lwpHWrRQTI2GimtGk4463LLJu7AXpNABRIRqfMT2i2vbHGES3xdT6oc9 7hQtKkjDDRqq/IPoSm7wYkuVfWGA6CBdibHFYFyiJaLQDkipOBJXeDfFqFqgMrVX 40q6BaYZj7ZI7bCeFTisgM0hd2vz3pwmEVoB4UxQF9O5buHsglaUDZc8b+q2dJUF iZV4U9suMdOaITUh9IoSjVIZ9cvlIkYd1z6InKmv6Sfl6eznWPI1UU8J0IwwPvxG SwTgcPvdyyakMATwUxIgtw== -----END CERTIFICATE----- Version: 2 Serial Number: 1450832906 (0x5679f40a) Signature Algorithm: sha256WithRSAEncryption Issuer: /C=US/ST=CA/L=San Jose/O=ubnt.com/OU=UniFi/CN=UniFi Not valid before: Dec 23 01:08:26 2015 GMT Not valid after: Dec 20 01:08:26 2025 GMT Subject: /C=US/ST=CA/L=San Jose/O=ubnt.com/OU=UniFi/CN=UniFi Public Key Algorithm: rsaEncryption RSA Public Key: (2048 bit) Public-Key: (2048 bit) Modulus: 00:8c:98:6d:3d:61:4b:c3:dc:da:59:e6:9f:ec:95: 0e:61:e5:0d:ea:5d:9a:9e:51:af:d1:92:9f:7d:69: 62:38:0e:71:d5:08:35:9f:c2:b8:27:7a:e4:14:46: 8c:73:e8:7e:50:15:45:67:d9:f3:f4:e2:40:2c:4f: e9:42:0a:de:6d:b9:ea:51:75:90:ee:d6:f1:d1:ea: b9:db:54:5d:b7:58:79:27:a2:ce:4b:38:7e:50:86: d8:08:bb:e7:5f:d7:0f:ed:be:6b:af:5b:a9:15:d7: 60:42:c8:f6:70:83:08:80:24:3a:61:1b:d8:52:1f: a8:b8:73:bb:03:43:79:63:f5:c7:db:da:f3:b7:eb: 6f:50:0f:4b:dc:af:78:c7:40:a3:5e:f9:55:cb:b9: 49:da:ea:57:8a:68:03:3a:c9:9c:14:e3:04:8a:89: 31:d5:f4:b8:42:bf:f1:c0:86:2c:8e:43:6b:29:1d: 51:36:b1:db:b3:2f:fb:ea:7d:45:98:4a:d2:0f:ef: c8:6d:94:20:1b:35:cc:ba:40:99:43:ff:5b:27:4a: a0:f7:69:2e:64:8c:a8:8f:28:45:a2:38:94:9f:ff: 3f:aa:db:0a:b8:b2:d2:d3:e7:dc:c0:cf:63:9c:31: 9c:5c:42:93:ce:fd:bc:b5:a2:c8:c7:76:f5:31:47: 18:a3 Exponent: 65537 (0x10001) Verify Certificate: self signed certificate
Kommentar