Remove pre-version patch files.
parent
ba5ed555cc
commit
25be0e00ca
28
README.md
28
README.md
|
@ -29,32 +29,27 @@ Default support is in bold type.
|
||||||
- [Google(Gmail)](https://gmail.com/) : _TLSv1.3_ draft 23, **28**
|
- [Google(Gmail)](https://gmail.com/) : _TLSv1.3_ draft 23, **28**
|
||||||
- [NSS TLS 1.3(Mozilla)](https://tls13.crypto.mozilla.org/) : _TLSv1.3_ draft **28**
|
- [NSS TLS 1.3(Mozilla)](https://tls13.crypto.mozilla.org/) : _TLSv1.3_ draft **28**
|
||||||
|
|
||||||
[Compatible OpenSSL-1.1.1-pre10-dev (OpenSSL, 22668 commits)](https://github.com/openssl/openssl/tree/2fe3e2b68272e803a6e35259a49919d57205418b)
|
[Compatible OpenSSL-1.1.1 (OpenSSL, 22764 commits)](https://github.com/openssl/openssl/tree/1708e3e85b4a86bae26860aa5d2913fc8eff6086)
|
||||||
|
|
||||||
## Patch files
|
## Patch files
|
||||||
|
|
||||||
You can find the _OpenSSL 1.1.0h_ patch is [here.](https://gitlab.com/buik/openssl/blob/openssl-patch/openssl-1.1/OpenSSL1.1h-equal-preference-cipher-groups.patch)
|
You can find the _OpenSSL 1.1.0h_ patch is [here.](https://gitlab.com/buik/openssl/blob/openssl-patch/openssl-1.1/OpenSSL1.1h-equal-preference-cipher-groups.patch)
|
||||||
|
|
||||||
Here is the basic patch content.
|
Here is the basic patch content.
|
||||||
- Support TLS 1.3 draft 23 + 26 + 28 **(Pre9~10) + final** (Not support pre2 - 26, 28, final)
|
- Support TLS 1.3 draft 23 + 26 + 28 + final
|
||||||
- Server: draft 23 + 26 + 28
|
- Server: draft 23 + 26 + 28 + final
|
||||||
- Client: draft 23 + 26 + 27 + 28
|
- Client: draft 23 + 26 + 27 + 28 + final
|
||||||
- (pre9~10)Server: draft 23 + 26 + 28 + final
|
|
||||||
- (pre9~10)Client: draft 23 + 26 + 27 + 28 + final
|
|
||||||
- BoringSSL's Equal Preference Patch
|
- BoringSSL's Equal Preference Patch
|
||||||
- Weak 3DES and not using ECDHE ciphers is not used in TLSv1.1 or later.
|
- Weak 3DES and not using ECDHE ciphers is not used in TLSv1.1 or later.
|
||||||
|
|
||||||
| Patch file name | Patch list |
|
| Patch file name | Patch list |
|
||||||
| :--- | :--- |
|
| :--- | :--- |
|
||||||
| openssl-equal-pre2.patch | **_Not support_** draft **26, 28**. |
|
| openssl-equal-1.1.1.patch | Support **final (TLS 1.3)**, TLS 1.3 cipher settings **_can not_** be changed on _nginx_. |
|
||||||
| openssl-equal-pre7.patch<br />openssl-equal-pre8.patch | TLS 1.3 cipher settings **_can not_** be changed on _nginx_. |
|
| openssl-equal-1.1.1_ciphers.patch | Support **final (TLS 1.3)**, TLS 1.3 cipher settings **_can_** be changed on _nginx_. |
|
||||||
| openssl-equal-pre7_ciphers.patch<br />openssl-equal-pre8_ciphers.patch | TLS 1.3 cipher settings **_can_** be changed on _nginx_. |
|
|
||||||
| openssl-equal-pre9.patch<br />openssl-equal-pre10.patch | Support **final (TLS 1.3)**, TLS 1.3 cipher settings **_can not_** be changed on _nginx_. |
|
|
||||||
| openssl-equal-pre9_ciphers.patch<br />openssl-equal-pre10_ciphers.patch | Support **final (TLS 1.3)**, TLS 1.3 cipher settings **_can_** be changed on _nginx_. |
|
|
||||||
|
|
||||||
**The "_ciphers" patch file is a temporary change to the TLS 1.3 configuration.**
|
**The "_ciphers" patch file is a temporary change to the TLS 1.3 configuration.**
|
||||||
|
|
||||||
Example of setting TLS 1.3 cipher in nginx (pre7 or higher):
|
Example of setting TLS 1.3 cipher in nginx:
|
||||||
|
|
||||||
| Example | Ciphers |
|
| Example | Ciphers |
|
||||||
| :--- | :--- |
|
| :--- | :--- |
|
||||||
|
@ -118,17 +113,12 @@ ssl_ecdh_curve X25519:P-256:P-384;
|
||||||
ssl_prefer_server_ciphers on;
|
ssl_prefer_server_ciphers on;
|
||||||
```
|
```
|
||||||
|
|
||||||
### OpenSSL-1.1.1-pre2 ciphers (draft 23)
|
### OpenSSL-1.1.1 ciphers (draft 23, 26, 28, final)
|
||||||
```
|
|
||||||
[TLS13-AES-128-GCM-SHA256|TLS13-AES-256-GCM-SHA384|TLS13-CHACHA20-POLY1305-SHA256]:[EECDH+ECDSA+AESGCM+AES128|EECDH+ECDSA+CHACHA20]:EECDH+ECDSA+AESGCM+AES256:EECDH+ECDSA+AES128+SHA:EECDH+ECDSA+AES256+SHA:[EECDH+aRSA+AESGCM+AES128|EECDH+aRSA+CHACHA20]:EECDH+aRSA+AESGCM+AES256:EECDH+aRSA+AES128+SHA:EECDH+aRSA+AES256+SHA:RSA+AES128+SHA:RSA+AES256+SHA:RSA+3DES
|
|
||||||
```
|
|
||||||
|
|
||||||
### OpenSSL-1.1.1-pre7 - 10 ciphers (draft 23, 26, 28, **(pre9-10) - final**)
|
|
||||||
```
|
```
|
||||||
[EECDH+ECDSA+AESGCM+AES128|EECDH+ECDSA+CHACHA20]:EECDH+ECDSA+AESGCM+AES256:EECDH+ECDSA+AES128+SHA:EECDH+ECDSA+AES256+SHA:[EECDH+aRSA+AESGCM+AES128|EECDH+aRSA+CHACHA20]:EECDH+aRSA+AESGCM+AES256:EECDH+aRSA+AES128+SHA:EECDH+aRSA+AES256+SHA:RSA+AES128+SHA:RSA+AES256+SHA:RSA+3DES
|
[EECDH+ECDSA+AESGCM+AES128|EECDH+ECDSA+CHACHA20]:EECDH+ECDSA+AESGCM+AES256:EECDH+ECDSA+AES128+SHA:EECDH+ECDSA+AES256+SHA:[EECDH+aRSA+AESGCM+AES128|EECDH+aRSA+CHACHA20]:EECDH+aRSA+AESGCM+AES256:EECDH+aRSA+AES128+SHA:EECDH+aRSA+AES256+SHA:RSA+AES128+SHA:RSA+AES256+SHA:RSA+3DES
|
||||||
```
|
```
|
||||||
|
|
||||||
### OpenSSL-1.1.1-pre7 - 10_ciphers ciphers (draft 23, 26, 28, **(pre9-10) - final**)
|
### OpenSSL-1.1.1_ciphers ciphers (draft 23, 26, 28, final)
|
||||||
```
|
```
|
||||||
[TLS13+AESGCM+AES128|TLS13+AESGCM+AES256|TLS13+CHACHA20]:[EECDH+ECDSA+AESGCM+AES128|EECDH+ECDSA+CHACHA20]:EECDH+ECDSA+AESGCM+AES256:EECDH+ECDSA+AES128+SHA:EECDH+ECDSA+AES256+SHA:[EECDH+aRSA+AESGCM+AES128|EECDH+aRSA+CHACHA20]:EECDH+aRSA+AESGCM+AES256:EECDH+aRSA+AES128+SHA:EECDH+aRSA+AES256+SHA:RSA+AES128+SHA:RSA+AES256+SHA:RSA+3DES
|
[TLS13+AESGCM+AES128|TLS13+AESGCM+AES256|TLS13+CHACHA20]:[EECDH+ECDSA+AESGCM+AES128|EECDH+ECDSA+CHACHA20]:EECDH+ECDSA+AESGCM+AES256:EECDH+ECDSA+AES128+SHA:EECDH+ECDSA+AES256+SHA:[EECDH+aRSA+AESGCM+AES128|EECDH+aRSA+CHACHA20]:EECDH+aRSA+AESGCM+AES256:EECDH+aRSA+AES128+SHA:EECDH+aRSA+AES256+SHA:RSA+AES128+SHA:RSA+AES256+SHA:RSA+3DES
|
||||||
```
|
```
|
||||||
|
|
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
Loading…
Reference in New Issue