uCosminexus Application Server, Security Management Guide
The following subsection describes the protocols and encryption suites compatible with the SSL/TLS communication functionality realized by SSL-J.
This communication functionality can be used with the following protocols:
The table below lists the encryption suites compatible with the SSL/TLS communication functionality realized by SSL-J. It also lists the protocols supported by these encryption suites.
Table 7-4 Encryption suites compatible with the SSL/TLS communication functionality realized by SSL-J, and supported protocols
| No. | Encryption suite | Protocol | |||
|---|---|---|---|---|---|
| SSLv3 | TLSv1 | TLSv1.1 | TLSv1.2 | ||
| 1 | TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 | -- | -- | -- | S |
| 2 | TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 | -- | -- | -- | S |
| 3 | TLS_RSA_WITH_AES_256_CBC_SHA256 | -- | -- | -- | S+D |
| 4 | TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 | -- | -- | -- | S |
| 5 | TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 | -- | -- | -- | S |
| 6 | TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 | -- | -- | -- | S+D |
| 7 | TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 | -- | -- | -- | S+D |
| 8 | TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA | -- | S | S | S |
| 9 | TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA | -- | S | S | S |
| 10 | TLS_RSA_WITH_AES_256_CBC_SHA | S | S | S | S+D |
| 11 | TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA | -- | S | S | S |
| 12 | TLS_ECDH_RSA_WITH_AES_256_CBC_SHA | -- | S | S | S |
| 13 | TLS_DHE_RSA_WITH_AES_256_CBC_SHA | S | S | S | S+D |
| 14 | TLS_DHE_DSS_WITH_AES_256_CBC_SHA | S | S | S | S+D |
| 15 | TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 | -- | -- | -- | S |
| 16 | TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 | -- | -- | -- | S |
| 17 | TLS_RSA_WITH_AES_128_CBC_SHA256 | -- | -- | -- | S+D |
| 18 | TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256 | -- | -- | -- | S |
| 19 | TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256 | -- | -- | -- | S |
| 20 | TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 | -- | -- | -- | S+D |
| 21 | TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 | -- | -- | -- | S+D |
| 22 | TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA | -- | S | S | S |
| 23 | TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA | -- | S | S | S |
| 24 | TLS_RSA_WITH_AES_128_CBC_SHA | S | S | S | S+D |
| 25 | TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA | -- | S | S | S |
| 26 | TLS_ECDH_RSA_WITH_AES_128_CBC_SHA | -- | S | S | S |
| 27 | TLS_DHE_RSA_WITH_AES_128_CBC_SHA | S | S | S | S+D |
| 28 | TLS_DHE_DSS_WITH_AES_128_CBC_SHA | S | S | S | S+D |
| 29 | TLS_ECDHE_ECDSA_WITH_RC4_128_SHA | -- | S | S | S |
| 30 | TLS_ECDHE_RSA_WITH_RC4_128_SHA | -- | S | S | S |
| 31 | SSL_RSA_WITH_RC4_128_SHA | S | S | S | S+D |
| 32 | TLS_ECDH_ECDSA_WITH_RC4_128_SHA | -- | S | S | S |
| 33 | TLS_ECDH_RSA_WITH_RC4_128_SHA | -- | S | S | S |
| 34 | TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA | -- | S | S | S |
| 35 | TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA | -- | S | S | S |
| 36 | SSL_RSA_WITH_3DES_EDE_CBC_SHA | S | S | S | S+D |
| 37 | TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA | -- | S | S | S |
| 38 | TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA | -- | S | S | S |
| 39 | SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA | S | S | S | S+D |
| 40 | SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA | S | S | S | S+D |
| 41 | SSL_RSA_WITH_RC4_128_MD5 | S | S | S | S+D |
Note: Some encryption suites are likely to become unusable when they are upgraded. They are supported as non-recommended encryption suites for the SSL/TLS communication functionality realized by SSL-J. For information about these encryption suites, see 7.3.7 Precautions for using the SSL/TLS communication functionality realized by SSL-J.
All Rights Reserved. Copyright (C) 2013, Hitachi, Ltd