Tjaaa... was gibts fuer Moeglichkeiten?
Du koenntest also versuchen ein Downgrade des Controllers auf 5.5.20 zu machen oder aber die SSL-Redirection im Controller ausschalten - ich habe aber keine Ahnung wie (und ob ueberhaupt) das zu bewerkstelligen waere.
Du koenntest auch in das cfg File des Controllers gucken ob da irgendwelche sonderbaren HTTPS-Konfigurationen vorgenommen wurden bzw schauen ob man eventuelle Aenderungen im Controller-Upgrade da wieder wegkonfigurieren koennte.
Du koenntest schlussendlich auch noch sslscan auf deinem Edomi installieren (das kommt allerdings aus dem EPEL-Repo, wenn Du das eingebunden hast genuegt ein simples "yum install sslscan") und auf Deinen Controller loslassen. Das koenntest Du dann mit meinem Ergebnis vergleichen und gucken wo da Unterschiede liegen und welche genau das sind.
Meine sslscan Ausgabe (Controller 5.5.20 auf CentOS 6) sieht so aus (die "Supported Client Ciphers" hab ich mal draussen gelassen, die interessieren hier nicht wirklich):
- Es liegt an einer geaenderten API? Wohl nicht - zumindest in erster Instanz nicht - denn soweit kommt der LBS gar nicht erst, bereits die SSL-Verbindung schlaegt fehl.
- Es liegt an einem ungueltigen Zertifkat? Eher unwahrscheinlich, denn im LBS sind die Curl-Optionen SSL_VERIFY_HOST und SSL_VERIFY_PEER beide auf "false" gesetzt, damit sind quasi alle SSL-Validierungen deaktiviert.
- Es liegt am Cloudkey? Auch unwahrscheinlich, ist ja kein Hardware-Problem?
- Es liegt am Controller? Das ist wohl am "vermutlichsten" der Fall. Bereits beim letzten Update gab es Aenderungen im SSL-Server die diese curl/nss Updates erforderlich machten.
When you have excluded the impossible, whatever remains, however improbable, must be the truth.
Du koenntest auch in das cfg File des Controllers gucken ob da irgendwelche sonderbaren HTTPS-Konfigurationen vorgenommen wurden bzw schauen ob man eventuelle Aenderungen im Controller-Upgrade da wieder wegkonfigurieren koennte.
Du koenntest schlussendlich auch noch sslscan auf deinem Edomi installieren (das kommt allerdings aus dem EPEL-Repo, wenn Du das eingebunden hast genuegt ein simples "yum install sslscan") und auf Deinen Controller loslassen. Das koenntest Du dann mit meinem Ergebnis vergleichen und gucken wo da Unterschiede liegen und welche genau das sind.
Meine sslscan Ausgabe (Controller 5.5.20 auf CentOS 6) sieht so aus (die "Supported Client Ciphers" hab ich mal draussen gelassen, die interessieren hier nicht wirklich):
Code:
_
___ ___| |___ ___ __ _ _ __
/ __/ __| / __|/ __/ _` | '_ \
\__ \__ \ \__ \ (_| (_| | | | |
|___/___/_|___/\___\__,_|_| |_|
sslscan version 1.10.2
OpenSSL 1.0.1e-fips 11 Feb 2013
Testing SSL server blahblah.localnet on port 8443
Supported Client Cipher(s):
...
Supported Server Cipher(s):
Rejected SSLv2 128 bits DES-CBC3-MD5
Rejected SSLv2 128 bits IDEA-CBC-MD5
Rejected SSLv2 128 bits RC2-CBC-MD5
Rejected SSLv2 128 bits RC4-MD5
Failed SSLv3 256 bits ECDHE-RSA-AES256-GCM-SHA384
Failed SSLv3 256 bits ECDHE-ECDSA-AES256-GCM-SHA384
Failed SSLv3 256 bits ECDHE-RSA-AES256-SHA384
Failed SSLv3 256 bits ECDHE-ECDSA-AES256-SHA384
Failed SSLv3 256 bits ECDHE-RSA-AES256-SHA
Failed SSLv3 256 bits ECDHE-ECDSA-AES256-SHA
Failed SSLv3 256 bits DHE-DSS-AES256-GCM-SHA384
Failed SSLv3 256 bits DHE-RSA-AES256-GCM-SHA384
Failed SSLv3 256 bits DHE-RSA-AES256-SHA256
Failed SSLv3 256 bits DHE-DSS-AES256-SHA256
Failed SSLv3 256 bits DHE-RSA-AES256-SHA
Failed SSLv3 256 bits DHE-DSS-AES256-SHA
Failed SSLv3 256 bits DHE-RSA-CAMELLIA256-SHA
Failed SSLv3 256 bits DHE-DSS-CAMELLIA256-SHA
Failed SSLv3 256 bits AECDH-AES256-SHA
Failed SSLv3 256 bits ADH-AES256-GCM-SHA384
Failed SSLv3 256 bits ADH-AES256-SHA256
Failed SSLv3 256 bits ADH-AES256-SHA
Failed SSLv3 256 bits ADH-CAMELLIA256-SHA
Failed SSLv3 256 bits ECDH-RSA-AES256-GCM-SHA384
Failed SSLv3 256 bits ECDH-ECDSA-AES256-GCM-SHA384
Failed SSLv3 256 bits ECDH-RSA-AES256-SHA384
Failed SSLv3 256 bits ECDH-ECDSA-AES256-SHA384
Failed SSLv3 256 bits ECDH-RSA-AES256-SHA
Failed SSLv3 256 bits ECDH-ECDSA-AES256-SHA
Failed SSLv3 256 bits AES256-GCM-SHA384
Failed SSLv3 256 bits AES256-SHA256
Failed SSLv3 256 bits AES256-SHA
Failed SSLv3 256 bits CAMELLIA256-SHA
Failed SSLv3 256 bits PSK-AES256-CBC-SHA
Failed SSLv3 128 bits ECDHE-RSA-AES128-GCM-SHA256
Failed SSLv3 128 bits ECDHE-ECDSA-AES128-GCM-SHA256
Failed SSLv3 128 bits ECDHE-RSA-AES128-SHA256
Failed SSLv3 128 bits ECDHE-ECDSA-AES128-SHA256
Failed SSLv3 128 bits ECDHE-RSA-AES128-SHA
Failed SSLv3 128 bits ECDHE-ECDSA-AES128-SHA
Failed SSLv3 128 bits DHE-DSS-AES128-GCM-SHA256
Failed SSLv3 128 bits DHE-RSA-AES128-GCM-SHA256
Failed SSLv3 128 bits DHE-RSA-AES128-SHA256
Failed SSLv3 128 bits DHE-DSS-AES128-SHA256
Failed SSLv3 128 bits DHE-RSA-AES128-SHA
Failed SSLv3 128 bits DHE-DSS-AES128-SHA
Failed SSLv3 128 bits ECDHE-RSA-DES-CBC3-SHA
Failed SSLv3 128 bits ECDHE-ECDSA-DES-CBC3-SHA
Failed SSLv3 128 bits DHE-RSA-SEED-SHA
Failed SSLv3 128 bits DHE-DSS-SEED-SHA
Failed SSLv3 128 bits DHE-RSA-CAMELLIA128-SHA
Failed SSLv3 128 bits DHE-DSS-CAMELLIA128-SHA
Failed SSLv3 128 bits EDH-RSA-DES-CBC3-SHA
Failed SSLv3 128 bits EDH-DSS-DES-CBC3-SHA
Failed SSLv3 128 bits AECDH-AES128-SHA
Failed SSLv3 128 bits ADH-AES128-GCM-SHA256
Failed SSLv3 128 bits ADH-AES128-SHA256
Failed SSLv3 128 bits ADH-AES128-SHA
Failed SSLv3 128 bits AECDH-DES-CBC3-SHA
Failed SSLv3 128 bits ADH-SEED-SHA
Failed SSLv3 128 bits ADH-CAMELLIA128-SHA
Failed SSLv3 128 bits ADH-DES-CBC3-SHA
Failed SSLv3 128 bits ECDH-RSA-AES128-GCM-SHA256
Failed SSLv3 128 bits ECDH-ECDSA-AES128-GCM-SHA256
Failed SSLv3 128 bits ECDH-RSA-AES128-SHA256
Failed SSLv3 128 bits ECDH-ECDSA-AES128-SHA256
Failed SSLv3 128 bits ECDH-RSA-AES128-SHA
Failed SSLv3 128 bits ECDH-ECDSA-AES128-SHA
Failed SSLv3 128 bits ECDH-RSA-DES-CBC3-SHA
Failed SSLv3 128 bits ECDH-ECDSA-DES-CBC3-SHA
Failed SSLv3 128 bits AES128-GCM-SHA256
Failed SSLv3 128 bits AES128-SHA256
Failed SSLv3 128 bits AES128-SHA
Failed SSLv3 128 bits SEED-SHA
Failed SSLv3 128 bits CAMELLIA128-SHA
Failed SSLv3 128 bits DES-CBC3-SHA
Failed SSLv3 128 bits IDEA-CBC-SHA
Failed SSLv3 128 bits PSK-AES128-CBC-SHA
Failed SSLv3 128 bits PSK-3DES-EDE-CBC-SHA
Failed SSLv3 128 bits KRB5-IDEA-CBC-SHA
Failed SSLv3 128 bits KRB5-DES-CBC3-SHA
Failed SSLv3 128 bits KRB5-IDEA-CBC-MD5
Failed SSLv3 128 bits KRB5-DES-CBC3-MD5
Failed SSLv3 128 bits ECDHE-RSA-RC4-SHA
Failed SSLv3 128 bits ECDHE-ECDSA-RC4-SHA
Failed SSLv3 128 bits AECDH-RC4-SHA
Failed SSLv3 128 bits ADH-RC4-MD5
Failed SSLv3 128 bits ECDH-RSA-RC4-SHA
Failed SSLv3 128 bits ECDH-ECDSA-RC4-SHA
Failed SSLv3 128 bits RC4-SHA
Failed SSLv3 128 bits RC4-MD5
Failed SSLv3 128 bits PSK-RC4-SHA
Failed SSLv3 128 bits KRB5-RC4-SHA
Failed SSLv3 128 bits KRB5-RC4-MD5
Failed SSLv3 56 bits EDH-RSA-DES-CBC-SHA
Failed SSLv3 56 bits EDH-DSS-DES-CBC-SHA
Failed SSLv3 56 bits ADH-DES-CBC-SHA
Failed SSLv3 56 bits DES-CBC-SHA
Failed SSLv3 56 bits KRB5-DES-CBC-SHA
Failed SSLv3 56 bits KRB5-DES-CBC-MD5
Failed SSLv3 40 bits EXP-EDH-RSA-DES-CBC-SHA
Failed SSLv3 40 bits EXP-EDH-DSS-DES-CBC-SHA
Failed SSLv3 40 bits EXP-ADH-DES-CBC-SHA
Failed SSLv3 40 bits EXP-DES-CBC-SHA
Failed SSLv3 40 bits EXP-RC2-CBC-MD5
Failed SSLv3 40 bits EXP-KRB5-RC2-CBC-SHA
Failed SSLv3 40 bits EXP-KRB5-DES-CBC-SHA
Failed SSLv3 40 bits EXP-KRB5-RC2-CBC-MD5
Failed SSLv3 40 bits EXP-KRB5-DES-CBC-MD5
Failed SSLv3 40 bits EXP-ADH-RC4-MD5
Failed SSLv3 40 bits EXP-RC4-MD5
Failed SSLv3 40 bits EXP-KRB5-RC4-SHA
Failed SSLv3 40 bits EXP-KRB5-RC4-MD5
Failed SSLv3 0 bits ECDHE-RSA-NULL-SHA
Failed SSLv3 0 bits ECDHE-ECDSA-NULL-SHA
Failed SSLv3 0 bits AECDH-NULL-SHA
Failed SSLv3 0 bits ECDH-RSA-NULL-SHA
Failed SSLv3 0 bits ECDH-ECDSA-NULL-SHA
Failed SSLv3 0 bits NULL-SHA256
Failed SSLv3 0 bits NULL-SHA
Failed SSLv3 0 bits NULL-MD5
Failed TLSv1 256 bits ECDHE-RSA-AES256-GCM-SHA384
Failed TLSv1 256 bits ECDHE-ECDSA-AES256-GCM-SHA384
Failed TLSv1 256 bits ECDHE-RSA-AES256-SHA384
Failed TLSv1 256 bits ECDHE-ECDSA-AES256-SHA384
Rejected TLSv1 256 bits ECDHE-RSA-AES256-SHA
Rejected TLSv1 256 bits ECDHE-ECDSA-AES256-SHA
Failed TLSv1 256 bits DHE-DSS-AES256-GCM-SHA384
Failed TLSv1 256 bits DHE-RSA-AES256-GCM-SHA384
Failed TLSv1 256 bits DHE-RSA-AES256-SHA256
Failed TLSv1 256 bits DHE-DSS-AES256-SHA256
Rejected TLSv1 256 bits DHE-RSA-AES256-SHA
Rejected TLSv1 256 bits DHE-DSS-AES256-SHA
Rejected TLSv1 256 bits DHE-RSA-CAMELLIA256-SHA
Rejected TLSv1 256 bits DHE-DSS-CAMELLIA256-SHA
Rejected TLSv1 256 bits AECDH-AES256-SHA
Failed TLSv1 256 bits ADH-AES256-GCM-SHA384
Failed TLSv1 256 bits ADH-AES256-SHA256
Rejected TLSv1 256 bits ADH-AES256-SHA
Rejected TLSv1 256 bits ADH-CAMELLIA256-SHA
Failed TLSv1 256 bits ECDH-RSA-AES256-GCM-SHA384
Failed TLSv1 256 bits ECDH-ECDSA-AES256-GCM-SHA384
Failed TLSv1 256 bits ECDH-RSA-AES256-SHA384
Failed TLSv1 256 bits ECDH-ECDSA-AES256-SHA384
Rejected TLSv1 256 bits ECDH-RSA-AES256-SHA
Rejected TLSv1 256 bits ECDH-ECDSA-AES256-SHA
Failed TLSv1 256 bits AES256-GCM-SHA384
Failed TLSv1 256 bits AES256-SHA256
Rejected TLSv1 256 bits AES256-SHA
Rejected TLSv1 256 bits CAMELLIA256-SHA
Failed TLSv1 256 bits PSK-AES256-CBC-SHA
Failed TLSv1 128 bits ECDHE-RSA-AES128-GCM-SHA256
Failed TLSv1 128 bits ECDHE-ECDSA-AES128-GCM-SHA256
Failed TLSv1 128 bits ECDHE-RSA-AES128-SHA256
Failed TLSv1 128 bits ECDHE-ECDSA-AES128-SHA256
Rejected TLSv1 128 bits ECDHE-RSA-AES128-SHA
Rejected TLSv1 128 bits ECDHE-ECDSA-AES128-SHA
Failed TLSv1 128 bits DHE-DSS-AES128-GCM-SHA256
Failed TLSv1 128 bits DHE-RSA-AES128-GCM-SHA256
Failed TLSv1 128 bits DHE-RSA-AES128-SHA256
Failed TLSv1 128 bits DHE-DSS-AES128-SHA256
Rejected TLSv1 128 bits DHE-RSA-AES128-SHA
Rejected TLSv1 128 bits DHE-DSS-AES128-SHA
Rejected TLSv1 128 bits ECDHE-RSA-DES-CBC3-SHA
Rejected TLSv1 128 bits ECDHE-ECDSA-DES-CBC3-SHA
Rejected TLSv1 128 bits DHE-RSA-SEED-SHA
Rejected TLSv1 128 bits DHE-DSS-SEED-SHA
Rejected TLSv1 128 bits DHE-RSA-CAMELLIA128-SHA
Rejected TLSv1 128 bits DHE-DSS-CAMELLIA128-SHA
Rejected TLSv1 128 bits EDH-RSA-DES-CBC3-SHA
Rejected TLSv1 128 bits EDH-DSS-DES-CBC3-SHA
Rejected TLSv1 128 bits AECDH-AES128-SHA
Failed TLSv1 128 bits ADH-AES128-GCM-SHA256
Failed TLSv1 128 bits ADH-AES128-SHA256
Rejected TLSv1 128 bits ADH-AES128-SHA
Rejected TLSv1 128 bits AECDH-DES-CBC3-SHA
Rejected TLSv1 128 bits ADH-SEED-SHA
Rejected TLSv1 128 bits ADH-CAMELLIA128-SHA
Rejected TLSv1 128 bits ADH-DES-CBC3-SHA
Failed TLSv1 128 bits ECDH-RSA-AES128-GCM-SHA256
Failed TLSv1 128 bits ECDH-ECDSA-AES128-GCM-SHA256
Failed TLSv1 128 bits ECDH-RSA-AES128-SHA256
Failed TLSv1 128 bits ECDH-ECDSA-AES128-SHA256
Rejected TLSv1 128 bits ECDH-RSA-AES128-SHA
Rejected TLSv1 128 bits ECDH-ECDSA-AES128-SHA
Rejected TLSv1 128 bits ECDH-RSA-DES-CBC3-SHA
Rejected TLSv1 128 bits ECDH-ECDSA-DES-CBC3-SHA
Failed TLSv1 128 bits AES128-GCM-SHA256
Failed TLSv1 128 bits AES128-SHA256
Rejected TLSv1 128 bits AES128-SHA
Rejected TLSv1 128 bits SEED-SHA
Rejected TLSv1 128 bits CAMELLIA128-SHA
Rejected TLSv1 128 bits DES-CBC3-SHA
Rejected TLSv1 128 bits IDEA-CBC-SHA
Failed TLSv1 128 bits PSK-AES128-CBC-SHA
Failed TLSv1 128 bits PSK-3DES-EDE-CBC-SHA
Failed TLSv1 128 bits KRB5-IDEA-CBC-SHA
Failed TLSv1 128 bits KRB5-DES-CBC3-SHA
Failed TLSv1 128 bits KRB5-IDEA-CBC-MD5
Failed TLSv1 128 bits KRB5-DES-CBC3-MD5
Rejected TLSv1 128 bits ECDHE-RSA-RC4-SHA
Rejected TLSv1 128 bits ECDHE-ECDSA-RC4-SHA
Rejected TLSv1 128 bits AECDH-RC4-SHA
Rejected TLSv1 128 bits ADH-RC4-MD5
Rejected TLSv1 128 bits ECDH-RSA-RC4-SHA
Rejected TLSv1 128 bits ECDH-ECDSA-RC4-SHA
Rejected TLSv1 128 bits RC4-SHA
Rejected TLSv1 128 bits RC4-MD5
Failed TLSv1 128 bits PSK-RC4-SHA
Failed TLSv1 128 bits KRB5-RC4-SHA
Failed TLSv1 128 bits KRB5-RC4-MD5
Rejected TLSv1 56 bits EDH-RSA-DES-CBC-SHA
Rejected TLSv1 56 bits EDH-DSS-DES-CBC-SHA
Rejected TLSv1 56 bits ADH-DES-CBC-SHA
Rejected TLSv1 56 bits DES-CBC-SHA
Failed TLSv1 56 bits KRB5-DES-CBC-SHA
Failed TLSv1 56 bits KRB5-DES-CBC-MD5
Rejected TLSv1 40 bits EXP-EDH-RSA-DES-CBC-SHA
Rejected TLSv1 40 bits EXP-EDH-DSS-DES-CBC-SHA
Rejected TLSv1 40 bits EXP-ADH-DES-CBC-SHA
Rejected TLSv1 40 bits EXP-DES-CBC-SHA
Rejected TLSv1 40 bits EXP-RC2-CBC-MD5
Failed TLSv1 40 bits EXP-KRB5-RC2-CBC-SHA
Failed TLSv1 40 bits EXP-KRB5-DES-CBC-SHA
Failed TLSv1 40 bits EXP-KRB5-RC2-CBC-MD5
Failed TLSv1 40 bits EXP-KRB5-DES-CBC-MD5
Rejected TLSv1 40 bits EXP-ADH-RC4-MD5
Rejected TLSv1 40 bits EXP-RC4-MD5
Failed TLSv1 40 bits EXP-KRB5-RC4-SHA
Failed TLSv1 40 bits EXP-KRB5-RC4-MD5
Rejected TLSv1 0 bits ECDHE-RSA-NULL-SHA
Rejected TLSv1 0 bits ECDHE-ECDSA-NULL-SHA
Rejected TLSv1 0 bits AECDH-NULL-SHA
Rejected TLSv1 0 bits ECDH-RSA-NULL-SHA
Rejected TLSv1 0 bits ECDH-ECDSA-NULL-SHA
Failed TLSv1 0 bits NULL-SHA256
Rejected TLSv1 0 bits NULL-SHA
Rejected TLSv1 0 bits NULL-MD5
Failed TLS11 256 bits ECDHE-RSA-AES256-GCM-SHA384
Failed TLS11 256 bits ECDHE-ECDSA-AES256-GCM-SHA384
Failed TLS11 256 bits ECDHE-RSA-AES256-SHA384
Failed TLS11 256 bits ECDHE-ECDSA-AES256-SHA384
Rejected TLS11 256 bits ECDHE-RSA-AES256-SHA
Rejected TLS11 256 bits ECDHE-ECDSA-AES256-SHA
Failed TLS11 256 bits DHE-DSS-AES256-GCM-SHA384
Failed TLS11 256 bits DHE-RSA-AES256-GCM-SHA384
Failed TLS11 256 bits DHE-RSA-AES256-SHA256
Failed TLS11 256 bits DHE-DSS-AES256-SHA256
Rejected TLS11 256 bits DHE-RSA-AES256-SHA
Rejected TLS11 256 bits DHE-DSS-AES256-SHA
Rejected TLS11 256 bits DHE-RSA-CAMELLIA256-SHA
Rejected TLS11 256 bits DHE-DSS-CAMELLIA256-SHA
Rejected TLS11 256 bits AECDH-AES256-SHA
Failed TLS11 256 bits ADH-AES256-GCM-SHA384
Failed TLS11 256 bits ADH-AES256-SHA256
Rejected TLS11 256 bits ADH-AES256-SHA
Rejected TLS11 256 bits ADH-CAMELLIA256-SHA
Failed TLS11 256 bits ECDH-RSA-AES256-GCM-SHA384
Failed TLS11 256 bits ECDH-ECDSA-AES256-GCM-SHA384
Failed TLS11 256 bits ECDH-RSA-AES256-SHA384
Failed TLS11 256 bits ECDH-ECDSA-AES256-SHA384
Rejected TLS11 256 bits ECDH-RSA-AES256-SHA
Rejected TLS11 256 bits ECDH-ECDSA-AES256-SHA
Failed TLS11 256 bits AES256-GCM-SHA384
Failed TLS11 256 bits AES256-SHA256
Rejected TLS11 256 bits AES256-SHA
Rejected TLS11 256 bits CAMELLIA256-SHA
Failed TLS11 256 bits PSK-AES256-CBC-SHA
Failed TLS11 128 bits ECDHE-RSA-AES128-GCM-SHA256
Failed TLS11 128 bits ECDHE-ECDSA-AES128-GCM-SHA256
Failed TLS11 128 bits ECDHE-RSA-AES128-SHA256
Failed TLS11 128 bits ECDHE-ECDSA-AES128-SHA256
Accepted TLS11 128 bits ECDHE-RSA-AES128-SHA
Rejected TLS11 128 bits ECDHE-ECDSA-AES128-SHA
Failed TLS11 128 bits DHE-DSS-AES128-GCM-SHA256
Failed TLS11 128 bits DHE-RSA-AES128-GCM-SHA256
Failed TLS11 128 bits DHE-RSA-AES128-SHA256
Failed TLS11 128 bits DHE-DSS-AES128-SHA256
Rejected TLS11 128 bits DHE-RSA-AES128-SHA
Rejected TLS11 128 bits DHE-DSS-AES128-SHA
Rejected TLS11 128 bits ECDHE-RSA-DES-CBC3-SHA
Rejected TLS11 128 bits ECDHE-ECDSA-DES-CBC3-SHA
Rejected TLS11 128 bits DHE-RSA-SEED-SHA
Rejected TLS11 128 bits DHE-DSS-SEED-SHA
Rejected TLS11 128 bits DHE-RSA-CAMELLIA128-SHA
Rejected TLS11 128 bits DHE-DSS-CAMELLIA128-SHA
Rejected TLS11 128 bits EDH-RSA-DES-CBC3-SHA
Rejected TLS11 128 bits EDH-DSS-DES-CBC3-SHA
Rejected TLS11 128 bits AECDH-AES128-SHA
Failed TLS11 128 bits ADH-AES128-GCM-SHA256
Failed TLS11 128 bits ADH-AES128-SHA256
Rejected TLS11 128 bits ADH-AES128-SHA
Rejected TLS11 128 bits AECDH-DES-CBC3-SHA
Rejected TLS11 128 bits ADH-SEED-SHA
Rejected TLS11 128 bits ADH-CAMELLIA128-SHA
Rejected TLS11 128 bits ADH-DES-CBC3-SHA
Failed TLS11 128 bits ECDH-RSA-AES128-GCM-SHA256
Failed TLS11 128 bits ECDH-ECDSA-AES128-GCM-SHA256
Failed TLS11 128 bits ECDH-RSA-AES128-SHA256
Failed TLS11 128 bits ECDH-ECDSA-AES128-SHA256
Rejected TLS11 128 bits ECDH-RSA-AES128-SHA
Rejected TLS11 128 bits ECDH-ECDSA-AES128-SHA
Rejected TLS11 128 bits ECDH-RSA-DES-CBC3-SHA
Rejected TLS11 128 bits ECDH-ECDSA-DES-CBC3-SHA
Failed TLS11 128 bits AES128-GCM-SHA256
Failed TLS11 128 bits AES128-SHA256
Rejected TLS11 128 bits AES128-SHA
Rejected TLS11 128 bits SEED-SHA
Rejected TLS11 128 bits CAMELLIA128-SHA
Rejected TLS11 128 bits DES-CBC3-SHA
Rejected TLS11 128 bits IDEA-CBC-SHA
Failed TLS11 128 bits PSK-AES128-CBC-SHA
Failed TLS11 128 bits PSK-3DES-EDE-CBC-SHA
Failed TLS11 128 bits KRB5-IDEA-CBC-SHA
Failed TLS11 128 bits KRB5-DES-CBC3-SHA
Failed TLS11 128 bits KRB5-IDEA-CBC-MD5
Failed TLS11 128 bits KRB5-DES-CBC3-MD5
Rejected TLS11 128 bits ECDHE-RSA-RC4-SHA
Rejected TLS11 128 bits ECDHE-ECDSA-RC4-SHA
Rejected TLS11 128 bits AECDH-RC4-SHA
Rejected TLS11 128 bits ADH-RC4-MD5
Rejected TLS11 128 bits ECDH-RSA-RC4-SHA
Rejected TLS11 128 bits ECDH-ECDSA-RC4-SHA
Rejected TLS11 128 bits RC4-SHA
Rejected TLS11 128 bits RC4-MD5
Failed TLS11 128 bits PSK-RC4-SHA
Failed TLS11 128 bits KRB5-RC4-SHA
Failed TLS11 128 bits KRB5-RC4-MD5
Rejected TLS11 56 bits EDH-RSA-DES-CBC-SHA
Rejected TLS11 56 bits EDH-DSS-DES-CBC-SHA
Rejected TLS11 56 bits ADH-DES-CBC-SHA
Rejected TLS11 56 bits DES-CBC-SHA
Failed TLS11 56 bits KRB5-DES-CBC-SHA
Failed TLS11 56 bits KRB5-DES-CBC-MD5
Rejected TLS11 40 bits EXP-EDH-RSA-DES-CBC-SHA
Rejected TLS11 40 bits EXP-EDH-DSS-DES-CBC-SHA
Rejected TLS11 40 bits EXP-ADH-DES-CBC-SHA
Rejected TLS11 40 bits EXP-DES-CBC-SHA
Rejected TLS11 40 bits EXP-RC2-CBC-MD5
Failed TLS11 40 bits EXP-KRB5-RC2-CBC-SHA
Failed TLS11 40 bits EXP-KRB5-DES-CBC-SHA
Failed TLS11 40 bits EXP-KRB5-RC2-CBC-MD5
Failed TLS11 40 bits EXP-KRB5-DES-CBC-MD5
Rejected TLS11 40 bits EXP-ADH-RC4-MD5
Rejected TLS11 40 bits EXP-RC4-MD5
Failed TLS11 40 bits EXP-KRB5-RC4-SHA
Failed TLS11 40 bits EXP-KRB5-RC4-MD5
Rejected TLS11 0 bits ECDHE-RSA-NULL-SHA
Rejected TLS11 0 bits ECDHE-ECDSA-NULL-SHA
Rejected TLS11 0 bits AECDH-NULL-SHA
Rejected TLS11 0 bits ECDH-RSA-NULL-SHA
Rejected TLS11 0 bits ECDH-ECDSA-NULL-SHA
Failed TLS11 0 bits NULL-SHA256
Rejected TLS11 0 bits NULL-SHA
Rejected TLS11 0 bits NULL-MD5
Rejected TLS12 256 bits ECDHE-RSA-AES256-GCM-SHA384
Rejected TLS12 256 bits ECDHE-ECDSA-AES256-GCM-SHA384
Rejected TLS12 256 bits ECDHE-RSA-AES256-SHA384
Rejected TLS12 256 bits ECDHE-ECDSA-AES256-SHA384
Rejected TLS12 256 bits ECDHE-RSA-AES256-SHA
Rejected TLS12 256 bits ECDHE-ECDSA-AES256-SHA
Rejected TLS12 256 bits DHE-DSS-AES256-GCM-SHA384
Rejected TLS12 256 bits DHE-RSA-AES256-GCM-SHA384
Rejected TLS12 256 bits DHE-RSA-AES256-SHA256
Rejected TLS12 256 bits DHE-DSS-AES256-SHA256
Rejected TLS12 256 bits DHE-RSA-AES256-SHA
Rejected TLS12 256 bits DHE-DSS-AES256-SHA
Rejected TLS12 256 bits DHE-RSA-CAMELLIA256-SHA
Rejected TLS12 256 bits DHE-DSS-CAMELLIA256-SHA
Rejected TLS12 256 bits AECDH-AES256-SHA
Rejected TLS12 256 bits ADH-AES256-GCM-SHA384
Rejected TLS12 256 bits ADH-AES256-SHA256
Rejected TLS12 256 bits ADH-AES256-SHA
Rejected TLS12 256 bits ADH-CAMELLIA256-SHA
Rejected TLS12 256 bits ECDH-RSA-AES256-GCM-SHA384
Rejected TLS12 256 bits ECDH-ECDSA-AES256-GCM-SHA384
Rejected TLS12 256 bits ECDH-RSA-AES256-SHA384
Rejected TLS12 256 bits ECDH-ECDSA-AES256-SHA384
Rejected TLS12 256 bits ECDH-RSA-AES256-SHA
Rejected TLS12 256 bits ECDH-ECDSA-AES256-SHA
Rejected TLS12 256 bits AES256-GCM-SHA384
Rejected TLS12 256 bits AES256-SHA256
Rejected TLS12 256 bits AES256-SHA
Rejected TLS12 256 bits CAMELLIA256-SHA
Failed TLS12 256 bits PSK-AES256-CBC-SHA
Rejected TLS12 128 bits ECDHE-RSA-AES128-GCM-SHA256
Rejected TLS12 128 bits ECDHE-ECDSA-AES128-GCM-SHA256
Accepted TLS12 128 bits ECDHE-RSA-AES128-SHA256
Rejected TLS12 128 bits ECDHE-ECDSA-AES128-SHA256
Accepted TLS12 128 bits ECDHE-RSA-AES128-SHA
Rejected TLS12 128 bits ECDHE-ECDSA-AES128-SHA
Rejected TLS12 128 bits DHE-DSS-AES128-GCM-SHA256
Rejected TLS12 128 bits DHE-RSA-AES128-GCM-SHA256
Rejected TLS12 128 bits DHE-RSA-AES128-SHA256
Rejected TLS12 128 bits DHE-DSS-AES128-SHA256
Rejected TLS12 128 bits DHE-RSA-AES128-SHA
Rejected TLS12 128 bits DHE-DSS-AES128-SHA
Rejected TLS12 128 bits ECDHE-RSA-DES-CBC3-SHA
Rejected TLS12 128 bits ECDHE-ECDSA-DES-CBC3-SHA
Rejected TLS12 128 bits DHE-RSA-SEED-SHA
Rejected TLS12 128 bits DHE-DSS-SEED-SHA
Rejected TLS12 128 bits DHE-RSA-CAMELLIA128-SHA
Rejected TLS12 128 bits DHE-DSS-CAMELLIA128-SHA
Rejected TLS12 128 bits EDH-RSA-DES-CBC3-SHA
Rejected TLS12 128 bits EDH-DSS-DES-CBC3-SHA
Rejected TLS12 128 bits AECDH-AES128-SHA
Rejected TLS12 128 bits ADH-AES128-GCM-SHA256
Rejected TLS12 128 bits ADH-AES128-SHA256
Rejected TLS12 128 bits ADH-AES128-SHA
Rejected TLS12 128 bits AECDH-DES-CBC3-SHA
Rejected TLS12 128 bits ADH-SEED-SHA
Rejected TLS12 128 bits ADH-CAMELLIA128-SHA
Rejected TLS12 128 bits ADH-DES-CBC3-SHA
Rejected TLS12 128 bits ECDH-RSA-AES128-GCM-SHA256
Rejected TLS12 128 bits ECDH-ECDSA-AES128-GCM-SHA256
Rejected TLS12 128 bits ECDH-RSA-AES128-SHA256
Rejected TLS12 128 bits ECDH-ECDSA-AES128-SHA256
Rejected TLS12 128 bits ECDH-RSA-AES128-SHA
Rejected TLS12 128 bits ECDH-ECDSA-AES128-SHA
Rejected TLS12 128 bits ECDH-RSA-DES-CBC3-SHA
Rejected TLS12 128 bits ECDH-ECDSA-DES-CBC3-SHA
Rejected TLS12 128 bits AES128-GCM-SHA256
Rejected TLS12 128 bits AES128-SHA256
Rejected TLS12 128 bits AES128-SHA
Rejected TLS12 128 bits SEED-SHA
Rejected TLS12 128 bits CAMELLIA128-SHA
Rejected TLS12 128 bits DES-CBC3-SHA
Rejected TLS12 128 bits IDEA-CBC-SHA
Failed TLS12 128 bits PSK-AES128-CBC-SHA
Failed TLS12 128 bits PSK-3DES-EDE-CBC-SHA
Failed TLS12 128 bits KRB5-IDEA-CBC-SHA
Failed TLS12 128 bits KRB5-DES-CBC3-SHA
Failed TLS12 128 bits KRB5-IDEA-CBC-MD5
Failed TLS12 128 bits KRB5-DES-CBC3-MD5
Rejected TLS12 128 bits ECDHE-RSA-RC4-SHA
Rejected TLS12 128 bits ECDHE-ECDSA-RC4-SHA
Rejected TLS12 128 bits AECDH-RC4-SHA
Rejected TLS12 128 bits ADH-RC4-MD5
Rejected TLS12 128 bits ECDH-RSA-RC4-SHA
Rejected TLS12 128 bits ECDH-ECDSA-RC4-SHA
Rejected TLS12 128 bits RC4-SHA
Rejected TLS12 128 bits RC4-MD5
Failed TLS12 128 bits PSK-RC4-SHA
Failed TLS12 128 bits KRB5-RC4-SHA
Failed TLS12 128 bits KRB5-RC4-MD5
Rejected TLS12 56 bits EDH-RSA-DES-CBC-SHA
Rejected TLS12 56 bits EDH-DSS-DES-CBC-SHA
Rejected TLS12 56 bits ADH-DES-CBC-SHA
Rejected TLS12 56 bits DES-CBC-SHA
Failed TLS12 56 bits KRB5-DES-CBC-SHA
Failed TLS12 56 bits KRB5-DES-CBC-MD5
Rejected TLS12 40 bits EXP-EDH-RSA-DES-CBC-SHA
Rejected TLS12 40 bits EXP-EDH-DSS-DES-CBC-SHA
Rejected TLS12 40 bits EXP-ADH-DES-CBC-SHA
Rejected TLS12 40 bits EXP-DES-CBC-SHA
Rejected TLS12 40 bits EXP-RC2-CBC-MD5
Failed TLS12 40 bits EXP-KRB5-RC2-CBC-SHA
Failed TLS12 40 bits EXP-KRB5-DES-CBC-SHA
Failed TLS12 40 bits EXP-KRB5-RC2-CBC-MD5
Failed TLS12 40 bits EXP-KRB5-DES-CBC-MD5
Rejected TLS12 40 bits EXP-ADH-RC4-MD5
Rejected TLS12 40 bits EXP-RC4-MD5
Failed TLS12 40 bits EXP-KRB5-RC4-SHA
Failed TLS12 40 bits EXP-KRB5-RC4-MD5
Rejected TLS12 0 bits ECDHE-RSA-NULL-SHA
Rejected TLS12 0 bits ECDHE-ECDSA-NULL-SHA
Rejected TLS12 0 bits AECDH-NULL-SHA
Rejected TLS12 0 bits ECDH-RSA-NULL-SHA
Rejected TLS12 0 bits ECDH-ECDSA-NULL-SHA
Rejected TLS12 0 bits NULL-SHA256
Rejected TLS12 0 bits NULL-SHA
Rejected TLS12 0 bits NULL-MD5
Preferred Server Cipher(s):
SSLv2 0 bits (NONE)
TLSv1 0 bits (NONE)
TLS11 128 bits ECDHE-RSA-AES128-SHA
TLS12 128 bits ECDHE-RSA-AES128-SHA256
SSL Certificate:
Certificate blob:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Version: 2
Serial Number: 1450832906 (0x5679f40a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: /C=US/ST=CA/L=San Jose/O=ubnt.com/OU=UniFi/CN=UniFi
Not valid before: Dec 23 01:08:26 2015 GMT
Not valid after: Dec 20 01:08:26 2025 GMT
Subject: /C=US/ST=CA/L=San Jose/O=ubnt.com/OU=UniFi/CN=UniFi
Public Key Algorithm: rsaEncryption
RSA Public Key: (2048 bit)
Public-Key: (2048 bit)
Modulus:
00:8c:98:6d:3d:61:4b:c3:dc:da:59:e6:9f:ec:95:
0e:61:e5:0d:ea:5d:9a:9e:51:af:d1:92:9f:7d:69:
62:38:0e:71:d5:08:35:9f:c2:b8:27:7a:e4:14:46:
8c:73:e8:7e:50:15:45:67:d9:f3:f4:e2:40:2c:4f:
e9:42:0a:de:6d:b9:ea:51:75:90:ee:d6:f1:d1:ea:
b9:db:54:5d:b7:58:79:27:a2:ce:4b:38:7e:50:86:
d8:08:bb:e7:5f:d7:0f:ed:be:6b:af:5b:a9:15:d7:
60:42:c8:f6:70:83:08:80:24:3a:61:1b:d8:52:1f:
a8:b8:73:bb:03:43:79:63:f5:c7:db:da:f3:b7:eb:
6f:50:0f:4b:dc:af:78:c7:40:a3:5e:f9:55:cb:b9:
49:da:ea:57:8a:68:03:3a:c9:9c:14:e3:04:8a:89:
31:d5:f4:b8:42:bf:f1:c0:86:2c:8e:43:6b:29:1d:
51:36:b1:db:b3:2f:fb:ea:7d:45:98:4a:d2:0f:ef:
c8:6d:94:20:1b:35:cc:ba:40:99:43:ff:5b:27:4a:
a0:f7:69:2e:64:8c:a8:8f:28:45:a2:38:94:9f:ff:
3f:aa:db:0a:b8:b2:d2:d3:e7:dc:c0:cf:63:9c:31:
9c:5c:42:93:ce:fd:bc:b5:a2:c8:c7:76:f5:31:47:
18:a3
Exponent: 65537 (0x10001)
Verify Certificate:
self signed certificate





Kommentar