解决 SSL握手失败问题

深入解析:如何修复SSL / TLS握手失败错误(上) 接下来的三篇内容我们来讨论SSL / TLS握手失败错误及其修复方法。 针对互联网用户和网站所有者的SSL / TLS握手失败错误修复程序 像许多SSL错误消息一样,SSL握手错误可以从客户端和服务器端触发导致,有时候我们可以由常规的互联网用户进行修复,但有时候它表示网站的配置问题。 无论什么原因,这都可能是令人感到沮丧的SSL错误,因为它会阻止你与尝试访问的网站建立安全连接。这无论对用户或者网站来说都是不利的。对网站而言,它会驱散掉企业的业务(可能使客户直接推向竞争对手的怀抱)。 所以这几期的内容我们将来 阅读详情

背景

公司之前使用nginx 做ssl 证书卸载,现在切换到了云服务LB。云服务有卸载证书的能力。 部分设备连接不上。

抓包包文

1 看一下报错的位置

在这里插入图片描述

第4行:客户端发送了Hello
第5行:服务端正常回复
第6行:服务端回复握手失败

2 看一下Hello 信息

在这里插入图片描述
在Hello信息中客户端上送了4种 Cipher

3 检查云服务的配置

在这里插入图片描述
发现LB中的TLS策略和设备上送的策略没有交集。

知识点: 在握手过程中客户端上送自己支持的Cipher列表到服务端,服务端取

解决办法

添加设备支持的TLS策略到LB中。

特别说明

云服务中的加密算法 OpenSSL Name,抓包中的加密算法套件是 Cipher Suite Name。

其对应关系如下:

Cipher SuiteName (OpenSSL)KeyExch.EncryptionBitsCipher Suite Name (IANA)
[0x00]NoneNull0TLS_NULL_WITH_NULL_NULL
[0x01]NULL-MD5RSANull0TLS_RSA_WITH_NULL_MD5
[0x02]NULL-SHARSANull0TLS_RSA_WITH_NULL_SHA
[0x03]EXP-RC4-MD5RSA(512)RC440, exportTLS_RSA_EXPORT_WITH_RC4_40_MD5
[0x04]RC4-MD5RSARC4128TLS_RSA_WITH_RC4_128_MD5
[0x05]RC4-SHARSARC4128TLS_RSA_WITH_RC4_128_SHA
[0x06]EXP-RC2-CBC-MD5RSA(512)RC240, exportTLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5
[0x07]IDEA-CBC-SHARSAIDEA128TLS_RSA_WITH_IDEA_CBC_SHA
[0x08]EXP-DES-CBC-SHARSA(512)DES40, exportTLS_RSA_EXPORT_WITH_DES40_CBC_SHA
[0x09]DES-CBC-SHARSADES56TLS_RSA_WITH_DES_CBC_SHA
[0x0a]DES-CBC3-SHARSA3DES168TLS_RSA_WITH_3DES_EDE_CBC_SHA
[0x0b]EXP-DH-DSS-DES-CBC-SHADH/DSSDES40, exportTLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA
[0x0c]DH-DSS-DES-CBC-SHADH/DSSDES56TLS_DH_DSS_WITH_DES_CBC_SHA
[0x0d]DH-DSS-DES-CBC3-SHADH/DSS3DES168TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA
[0x0e]EXP-DH-RSA-DES-CBC-SHADH/RSADES40, exportTLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA
[0x0f]DH-RSA-DES-CBC-SHADH/RSADES56TLS_DH_RSA_WITH_DES_CBC_SHA
[0x10]DH-RSA-DES-CBC3-SHADH/RSA3DES168TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA
[0x11]EXP-EDH-DSS-DES-CBC-SHADH(512)DES40, exportTLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA
[0x12]EDH-DSS-DES-CBC-SHADHDES56TLS_DHE_DSS_WITH_DES_CBC_SHA
[0x13]EDH-DSS-DES-CBC3-SHADH3DES168TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA
[0x14]EXP-EDH-RSA-DES-CBC-SHADH(512)DES40, exportTLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA
[0x15]EDH-RSA-DES-CBC-SHADHDES56TLS_DHE_RSA_WITH_DES_CBC_SHA
[0x16]EDH-RSA-DES-CBC3-SHADH3DES168TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
[0x17]EXP-ADH-RC4-MD5DH(512)RC440, exportTLS_DH_anon_EXPORT_WITH_RC4_40_MD5
[0x18]ADH-RC4-MD5DHRC4128TLS_DH_anon_WITH_RC4_128_MD5
[0x19]EXP-ADH-DES-CBC-SHADH(512)DES40, exportTLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA
[0x1a]ADH-DES-CBC-SHADHDES56TLS_DH_anon_WITH_DES_CBC_SHA
[0x1b]ADH-DES-CBC3-SHADH3DES168TLS_DH_anon_WITH_3DES_EDE_CBC_SHA
[0x1c]FORTEZZANull0SSL_FORTEZZA_KEA_WITH_NULL_SHA
[0x1d]FORTEZZAFORTEZZA_CBC80SSL_FORTEZZA_KEA_WITH_FORTEZZA_CBC_SHA
[0x1e]FORTEZZAFORTEZZA_RC4128SSL_FORTEZZA_KEA_WITH_RC4_128_SHA
[0x1e]KRB5-DES-CBC-SHAKRB5DES56TLS_KRB5_WITH_DES_CBC_SHA
[0x1f]KRB5-DES-CBC3-SHAKRB53DES168TLS_KRB5_WITH_3DES_EDE_CBC_SHA
[0x20]KRB5-RC4-SHAKRB5RC4128TLS_KRB5_WITH_RC4_128_SHA
[0x21]KRB5-IDEA-CBC-SHAKRB5IDEA128TLS_KRB5_WITH_IDEA_CBC_SHA
[0x22]KRB5-DES-CBC-MD5KRB5DES56TLS_KRB5_WITH_DES_CBC_MD5
[0x23]KRB5-DES-CBC3-MD5KRB53DES168TLS_KRB5_WITH_3DES_EDE_CBC_MD5
[0x24]KRB5-RC4-MD5KRB5RC4128TLS_KRB5_WITH_RC4_128_MD5
[0x25]KRB5-IDEA-CBC-MD5KRB5IDEA128TLS_KRB5_WITH_IDEA_CBC_MD5
[0x26]EXP-KRB5-DES-CBC-SHAKRB5DES40, exportTLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA
[0x27]EXP-KRB5-RC2-CBC-SHAKRB5RC240, exportTLS_KRB5_EXPORT_WITH_RC2_CBC_40_SHA
[0x28]EXP-KRB5-RC4-SHAKRB5RC440, exportTLS_KRB5_EXPORT_WITH_RC4_40_SHA
[0x29]EXP-KRB5-DES-CBC-MD5KRB5DES40, exportTLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5
[0x2a]EXP-KRB5-RC2-CBC-MD5KRB5RC240, exportTLS_KRB5_EXPORT_WITH_RC2_CBC_40_MD5
[0x2b]EXP-KRB5-RC4-MD5KRB5RC440, exportTLS_KRB5_EXPORT_WITH_RC4_40_MD5
[0x2c]PSK-NULL-SHAPSKNull0TLS_PSK_WITH_NULL_SHA
[0x2d]DHE-PSK-NULL-SHADH/PSKNull0TLS_DHE_PSK_WITH_NULL_SHA
[0x2e]RSA-PSK-NULL-SHARSA/PSKNull0TLS_RSA_PSK_WITH_NULL_SHA
[0x2f]AES128-SHARSAAES128TLS_RSA_WITH_AES_128_CBC_SHA
[0x30]DH-DSS-AES128-SHADH/DSSAES128TLS_DH_DSS_WITH_AES_128_CBC_SHA
[0x31]DH-RSA-AES128-SHADH/RSAAES128TLS_DH_RSA_WITH_AES_128_CBC_SHA
[0x32]DHE-DSS-AES128-SHADHAES128TLS_DHE_DSS_WITH_AES_128_CBC_SHA
[0x33]DHE-RSA-AES128-SHADHAES128TLS_DHE_RSA_WITH_AES_128_CBC_SHA
[0x34]ADH-AES128-SHADHAES128TLS_DH_anon_WITH_AES_128_CBC_SHA
[0x35]AES256-SHARSAAES256TLS_RSA_WITH_AES_256_CBC_SHA
[0x36]DH-DSS-AES256-SHADH/DSSAES256TLS_DH_DSS_WITH_AES_256_CBC_SHA
[0x37]DH-RSA-AES256-SHADH/RSAAES256TLS_DH_RSA_WITH_AES_256_CBC_SHA
[0x38]DHE-DSS-AES256-SHADHAES256TLS_DHE_DSS_WITH_AES_256_CBC_SHA
[0x39]DHE-RSA-AES256-SHADHAES256TLS_DHE_RSA_WITH_AES_256_CBC_SHA
[0x3a]ADH-AES256-SHADHAES256TLS_DH_anon_WITH_AES_256_CBC_SHA
[0x3b]NULL-SHA256RSANull0TLS_RSA_WITH_NULL_SHA256
[0x3c]AES128-SHA256RSAAES128TLS_RSA_WITH_AES_128_CBC_SHA256
[0x3d]AES256-SHA256RSAAES256TLS_RSA_WITH_AES_256_CBC_SHA256
[0x3e]DH-DSS-AES128-SHA256DH/DSSAES128TLS_DH_DSS_WITH_AES_128_CBC_SHA256
[0x3f]DH-RSA-AES128-SHA256DH/RSAAES128TLS_DH_RSA_WITH_AES_128_CBC_SHA256
[0x40]DHE-DSS-AES128-SHA256DHAES128TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
[0x41]CAMELLIA128-SHARSACamellia128TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
[0x42]DH-DSS-CAMELLIA128-SHADH/DSSCamellia128TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA
[0x43]DH-RSA-CAMELLIA128-SHADH/RSACamellia128TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA
[0x44]DHE-DSS-CAMELLIA128-SHADHCamellia128TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA
[0x45]DHE-RSA-CAMELLIA128-SHADHCamellia128TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA
[0x46]ADH-CAMELLIA128-SHADHCamellia128TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA
[0x60]EXP1024-RC4-MD5RSA(1024)RC456, exportTLS_RSA_EXPORT1024_WITH_RC4_56_MD5
[0x61]EXP1024-RC2-CBC-MD5RSA(1024)RC256, exportTLS_RSA_EXPORT1024_WITH_RC2_CBC_56_MD5
[0x62]EXP1024-DES-CBC-SHARSA(1024)DES56, exportTLS_RSA_EXPORT1024_WITH_DES_CBC_SHA
[0x63]EXP1024-DHE-DSS-DES-CBC-SHADH(1024)DES56, exportTLS_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA
[0x64]EXP1024-RC4-SHARSA(1024)RC456, exportTLS_RSA_EXPORT1024_WITH_RC4_56_SHA
[0x65]EXP1024-DHE-DSS-RC4-SHADH(1024)RC456, exportTLS_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA
[0x66]DHE-DSS-RC4-SHADHRC4128TLS_DHE_DSS_WITH_RC4_128_SHA
[0x67]DHE-RSA-AES128-SHA256DHAES128TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
[0x68]DH-DSS-AES256-SHA256DH/DSSAES256TLS_DH_DSS_WITH_AES_256_CBC_SHA256
[0x69]DH-RSA-AES256-SHA256DH/RSAAES256TLS_DH_RSA_WITH_AES_256_CBC_SHA256
[0x6a]DHE-DSS-AES256-SHA256DHAES256TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
[0x6b]DHE-RSA-AES256-SHA256DHAES256TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
[0x6c]ADH-AES128-SHA256DHAES128TLS_DH_anon_WITH_AES_128_CBC_SHA256
[0x6d]ADH-AES256-SHA256DHAES256TLS_DH_anon_WITH_AES_256_CBC_SHA256
[0x80]GOST94-GOST89-GOST89VKO GOST 34.10-94GOST89256TLS_GOSTR341094_WITH_28147_CNT_IMIT
[0x81]GOST2001-GOST89-GOST89VKO GOST 34.10-2001GOST89256TLS_GOSTR341001_WITH_28147_CNT_IMIT
[0x82]GOST94-NULL-GOST94VKO GOST 34.10-94Null0TLS_GOSTR341001_WITH_NULL_GOSTR3411
[0x83]GOST2001-GOST89-GOST89VKO GOST 34.10-2001Null0TLS_GOSTR341094_WITH_NULL_GOSTR3411
[0x84]CAMELLIA256-SHARSACamellia256TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
[0x85]DH-DSS-CAMELLIA256-SHADH/DSSCamellia256TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA
[0x86]DH-RSA-CAMELLIA256-SHADH/RSACamellia256TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA
[0x87]DHE-DSS-CAMELLIA256-SHADHCamellia256TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA
[0x88]DHE-RSA-CAMELLIA256-SHADHCamellia256TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA
[0x89]ADH-CAMELLIA256-SHADHCamellia256TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA
[0x8a]PSK-RC4-SHAPSKRC4128TLS_PSK_WITH_RC4_128_SHA
[0x8b]PSK-3DES-EDE-CBC-SHAPSK3DES168TLS_PSK_WITH_3DES_EDE_CBC_SHA
[0x8c]PSK-AES128-CBC-SHAPSKAES128TLS_PSK_WITH_AES_128_CBC_SHA
[0x8d]PSK-AES256-CBC-SHAPSKAES256TLS_PSK_WITH_AES_256_CBC_SHA
[0x8e]PSK/DHERC4128TLS_DHE_PSK_WITH_RC4_128_SHA
[0x8f]PSK/DHE3DES168TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA
[0x90]PSK/DHEAES128TLS_DHE_PSK_WITH_AES_128_CBC_SHA
[0x91]PSK/DHEAES256TLS_DHE_PSK_WITH_AES_256_CBC_SHA
[0x92]PSK/RSARC4128TLS_RSA_PSK_WITH_RC4_128_SHA
[0x93]PSK/RSA3DES168TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA
[0x94]PSK/RSAAES128TLS_RSA_PSK_WITH_AES_128_CBC_SHA
[0x95]PSK/RSAAES256TLS_RSA_PSK_WITH_AES_256_CBC_SHA
[0x96]SEED-SHARSASEED128TLS_RSA_WITH_SEED_CBC_SHA
[0x97]DH-DSS-SEED-SHADH/DSSSEED128TLS_DH_DSS_WITH_SEED_CBC_SHA
[0x98]DH-RSA-SEED-SHADH/RSASEED128TLS_DH_RSA_WITH_SEED_CBC_SHA
[0x99]DHE-DSS-SEED-SHADHSEED128TLS_DHE_DSS_WITH_SEED_CBC_SHA
[0x9a]DHE-RSA-SEED-SHADHSEED128TLS_DHE_RSA_WITH_SEED_CBC_SHA
[0x9b]ADH-SEED-SHADHSEED128TLS_DH_anon_WITH_SEED_CBC_SHA
[0x9c]AES128-GCM-SHA256RSAAESGCM128TLS_RSA_WITH_AES_128_GCM_SHA256
[0x9d]AES256-GCM-SHA384RSAAESGCM256TLS_RSA_WITH_AES_256_GCM_SHA384
[0x9e]DHE-RSA-AES128-GCM-SHA256DHAESGCM128TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
[0x9f]DHE-RSA-AES256-GCM-SHA384DHAESGCM256TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
[0xa0]DH-RSA-AES128-GCM-SHA256DH/RSAAESGCM128TLS_DH_RSA_WITH_AES_128_GCM_SHA256
[0xa1]DH-RSA-AES256-GCM-SHA384DH/RSAAESGCM256TLS_DH_RSA_WITH_AES_256_GCM_SHA384
[0xa2]DHE-DSS-AES128-GCM-SHA256DHAESGCM128TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
[0xa3]DHE-DSS-AES256-GCM-SHA384DHAESGCM256TLS_DHE_DSS_WITH_AES_256_GCM_SHA384
[0xa4]DH-DSS-AES128-GCM-SHA256DH/DSSAESGCM128TLS_DH_DSS_WITH_AES_128_GCM_SHA256
[0xa5]DH-DSS-AES256-GCM-SHA384DH/DSSAESGCM256TLS_DH_DSS_WITH_AES_256_GCM_SHA384
[0xa6]ADH-AES128-GCM-SHA256DHAESGCM128TLS_DH_anon_WITH_AES_128_GCM_SHA256
[0xa7]ADH-AES256-GCM-SHA384DHAESGCM256TLS_DH_anon_WITH_AES_256_GCM_SHA384
[0xba]CAMELLIA128-SHA256RSACamellia128TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256
[0xbb]DH-DSS-CAMELLIA128-SHA256DH/DSSCamellia128TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256
[0xbc]DH-RSA-CAMELLIA128-SHA256DH/RSACamellia128TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256
[0xbd]DHE-DSS-CAMELLIA128-SHA256DHCamellia128TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256
[0xbe]DHE-RSA-CAMELLIA128-SHA256DHCamellia128TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
[0xbf]ADH-CAMELLIA128-SHA256DHCamellia128TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256
[0x5600]TLS_FALLBACK_SCSVTLS_EMPTY_RENEGOTIATION_INFO_SCSV
[0x1301]TLS_AES_128_GCM_SHA256ECDHAESGCM128TLS_AES_128_GCM_SHA256
[0x1302]TLS_AES_256_GCM_SHA384ECDHAESGCM256TLS_AES_256_GCM_SHA384
[0x1303]TLS_CHACHA20_POLY1305_SHA256ECDHChaCha20-Poly1305256TLS_CHACHA20_POLY1305_SHA256
[0x1304]TLS_AES_128_CCM_SHA256ECDHAESCCM128TLS_AES_128_CCM_SHA256
[0x1305]TLS_AES_128_CCM_8_SHA256ECDHAESCCM8128TLS_AES_128_CCM_8_SHA256
[0xc001]ECDH-ECDSA-NULL-SHAECDH/ECDSANull0TLS_ECDH_ECDSA_WITH_NULL_SHA
[0xc002]ECDH-ECDSA-RC4-SHAECDH/ECDSARC4128TLS_ECDH_ECDSA_WITH_RC4_128_SHA
[0xc003]ECDH-ECDSA-DES-CBC3-SHAECDH/ECDSA3DES168TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA
[0xc004]ECDH-ECDSA-AES128-SHAECDH/ECDSAAES128TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA
[0xc005]ECDH-ECDSA-AES256-SHAECDH/ECDSAAES256TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA
[0xc006]ECDHE-ECDSA-NULL-SHAECDHNull0TLS_ECDHE_ECDSA_WITH_NULL_SHA
[0xc007]ECDHE-ECDSA-RC4-SHAECDHRC4128TLS_ECDHE_ECDSA_WITH_RC4_128_SHA
[0xc008]ECDHE-ECDSA-DES-CBC3-SHAECDH3DES168TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA
[0xc009]ECDHE-ECDSA-AES128-SHAECDHAES128TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
[0xc00a]ECDHE-ECDSA-AES256-SHAECDHAES256TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
[0xc00b]ECDH-RSA-NULL-SHAECDH/RSANull0TLS_ECDH_RSA_WITH_NULL_SHA
[0xc00c]ECDH-RSA-RC4-SHAECDH/RSARC4128TLS_ECDH_RSA_WITH_RC4_128_SHA
[0xc00d]ECDH-RSA-DES-CBC3-SHAECDH/RSA3DES168TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA
[0xc00e]ECDH-RSA-AES128-SHAECDH/RSAAES128TLS_ECDH_RSA_WITH_AES_128_CBC_SHA
[0xc00f]ECDH-RSA-AES256-SHAECDH/RSAAES256TLS_ECDH_RSA_WITH_AES_256_CBC_SHA
[0xc010]ECDHE-RSA-NULL-SHAECDHNull0TLS_ECDHE_RSA_WITH_NULL_SHA
[0xc011]ECDHE-RSA-RC4-SHAECDHRC4128TLS_ECDHE_RSA_WITH_RC4_128_SHA
[0xc012]ECDHE-RSA-DES-CBC3-SHAECDH3DES168TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
[0xc013]ECDHE-RSA-AES128-SHAECDHAES128TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
[0xc014]ECDHE-RSA-AES256-SHAECDHAES256TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
[0xc015]AECDH-NULL-SHAECDHNull0TLS_ECDH_anon_WITH_NULL_SHA
[0xc016]AECDH-RC4-SHAECDHRC4128TLS_ECDH_anon_WITH_RC4_128_SHA
[0xc017]AECDH-DES-CBC3-SHAECDH3DES168TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA
[0xc018]AECDH-AES128-SHAECDHAES128TLS_ECDH_anon_WITH_AES_128_CBC_SHA
[0xc019]AECDH-AES256-SHAECDHAES256TLS_ECDH_anon_WITH_AES_256_CBC_SHA
[0xc01a]SRP-3DES-EDE-CBC-SHASRP3DES168TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA
[0xc01b]SRP-RSA-3DES-EDE-CBC-SHASRP3DES168TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA
[0xc01c]SRP-DSS-3DES-EDE-CBC-SHASRP3DES168TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA
[0xc01d]SRP-AES-128-CBC-SHASRPAES128TLS_SRP_SHA_WITH_AES_128_CBC_SHA
[0xc01e]SRP-RSA-AES-128-CBC-SHASRPAES128TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA
[0xc01f]SRP-DSS-AES-128-CBC-SHASRPAES128TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA
[0xc020]SRP-AES-256-CBC-SHASRPAES256TLS_SRP_SHA_WITH_AES_256_CBC_SHA
[0xc021]SRP-RSA-AES-256-CBC-SHASRPAES256TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA
[0xc022]SRP-DSS-AES-256-CBC-SHASRPAES256TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA
[0xc023]ECDHE-ECDSA-AES128-SHA256ECDHAES128TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
[0xc024]ECDHE-ECDSA-AES256-SHA384ECDHAES256TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
[0xc025]ECDH-ECDSA-AES128-SHA256ECDH/ECDSAAES128TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256
[0xc026]ECDH-ECDSA-AES256-SHA384ECDH/ECDSAAES256TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384
[0xc027]ECDHE-RSA-AES128-SHA256ECDHAES128TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
[0xc028]ECDHE-RSA-AES256-SHA384ECDHAES256TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
[0xc029]ECDH-RSA-AES128-SHA256ECDH/RSAAES128TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256
[0xc02a]ECDH-RSA-AES256-SHA384ECDH/RSAAES256TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384
[0xc02b]ECDHE-ECDSA-AES128-GCM-SHA256ECDHAESGCM128TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
[0xc02c]ECDHE-ECDSA-AES256-GCM-SHA384ECDHAESGCM256TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
[0xc02d]ECDH-ECDSA-AES128-GCM-SHA256ECDH/ECDSAAESGCM128TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
[0xc02e]ECDH-ECDSA-AES256-GCM-SHA384ECDH/ECDSAAESGCM256TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384
[0xc02f]ECDHE-RSA-AES128-GCM-SHA256ECDHAESGCM128TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
[0xc030]ECDHE-RSA-AES256-GCM-SHA384ECDHAESGCM256TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
[0xc031]ECDH-RSA-AES128-GCM-SHA256ECDH/RSAAESGCM128TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
[0xc032]ECDH-RSA-AES256-GCM-SHA384ECDH/RSAAESGCM256TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384
[0xc033]ECDHE-PSK-RC4-SHAPSK/ECDHERC4128TLS_ECDHE_PSK_WITH_RC4_128_SHA
[0xc034]ECDHE-PSK-3DES-EDE-CBC-SHAPSK/ECDHE3DES168TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA
[0xc035]ECDHE-PSK-AES128-CBC-SHAPSK/ECDHEAES128TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA
[0xc036]ECDHE-PSK-AES256-CBC-SHAPSK/ECDHEAES256TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA
[0xc037]ECDHE-PSK-AES128-CBC-SHA256PSK/ECDHEAES128TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256
[0xc038]ECDHE-PSK-AES256-CBC-SHA384PSK/ECDHEAES256TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384
[0xc039]ECDHE-PSK-NULL-SHAPSK/ECDHENull0TLS_ECDHE_PSK_WITH_NULL_SHA
[0xc03A]ECDHE-PSK-NULL-SHA256PSK/ECDHENull0TLS_ECDHE_PSK_WITH_NULL_SHA256
[0xc03B]ECDHE-PSK-NULL-SHA384PSK/ECDHENull0TLS_ECDHE_PSK_WITH_NULL_SHA384
[0xc03C]TLS_RSA_WITH_ARIA_128_CBC_SHA256
[0xc03D]TLS_RSA_WITH_ARIA_256_CBC_SHA384
[0xc03E]TLS_DH_DSS_WITH_ARIA_128_CBC_SHA256
[0xc03F]TLS_DH_DSS_WITH_ARIA_256_CBC_SHA384
[0xc040]TLS_DH_RSA_WITH_ARIA_128_CBC_SHA256
[0xc041]TLS_DH_RSA_WITH_ARIA_256_CBC_SHA384
[0xc042]TLS_DHE_DSS_WITH_ARIA_128_CBC_SHA256
[0xc043]TLS_DHE_DSS_WITH_ARIA_256_CBC_SHA384
[0xc044]TLS_DHE_RSA_WITH_ARIA_128_CBC_SHA256
[0xc045]TLS_DHE_RSA_WITH_ARIA_256_CBC_SHA384
[0xc046]TLS_DH_anon_WITH_ARIA_128_CBC_SHA256
[0xc047]TLS_DH_anon_WITH_ARIA_256_CBC_SHA384
[0xc048]TLS_ECDHE_ECDSA_WITH_ARIA_128_CBC_SHA256
[0xc049]TLS_ECDHE_ECDSA_WITH_ARIA_256_CBC_SHA384
[0xc04A]TLS_ECDH_ECDSA_WITH_ARIA_128_CBC_SHA256
[0xc04B]TLS_ECDH_ECDSA_WITH_ARIA_256_CBC_SHA384
[0xc04C]TLS_ECDHE_RSA_WITH_ARIA_128_CBC_SHA256
[0xc04D]TLS_ECDHE_RSA_WITH_ARIA_256_CBC_SHA384
[0xc04E]TLS_ECDH_RSA_WITH_ARIA_128_CBC_SHA256
[0xc04F]TLS_ECDH_RSA_WITH_ARIA_256_CBC_SHA384
[0xc050]TLS_RSA_WITH_ARIA_128_GCM_SHA256
[0xc051]TLS_RSA_WITH_ARIA_256_GCM_SHA384
[0xc052]TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256
[0xc053]TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384
[0xc054]TLS_DH_RSA_WITH_ARIA_128_GCM_SHA256
[0xc055]TLS_DH_RSA_WITH_ARIA_256_GCM_SHA384
[0xc056]TLS_DHE_DSS_WITH_ARIA_128_GCM_SHA256
[0xc057]TLS_DHE_DSS_WITH_ARIA_256_GCM_SHA384
[0xc058]TLS_DH_DSS_WITH_ARIA_128_GCM_SHA256
[0xc059]TLS_DH_DSS_WITH_ARIA_256_GCM_SHA384
[0xc05A]TLS_DH_anon_WITH_ARIA_128_GCM_SHA256
[0xc05B]TLS_DH_anon_WITH_ARIA_256_GCM_SHA384
[0xc05C]TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256
[0xc05D]TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384
[0xc05E]TLS_ECDH_ECDSA_WITH_ARIA_128_GCM_SHA256
[0xc05F]TLS_ECDH_ECDSA_WITH_ARIA_256_GCM_SHA384
[0xc060]TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256
[0xc061]TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384
[0xc062]TLS_ECDH_RSA_WITH_ARIA_128_GCM_SHA256
[0xc063]TLS_ECDH_RSA_WITH_ARIA_256_GCM_SHA384
[0xc064]TLS_PSK_WITH_ARIA_128_CBC_SHA256
[0xc065]TLS_PSK_WITH_ARIA_256_CBC_SHA384
[0xc066]TLS_DHE_PSK_WITH_ARIA_128_CBC_SHA256
[0xc067]TLS_DHE_PSK_WITH_ARIA_256_CBC_SHA384
[0xc068]TLS_RSA_PSK_WITH_ARIA_128_CBC_SHA256
[0xc069]TLS_RSA_PSK_WITH_ARIA_256_CBC_SHA384
[0xc06A]TLS_PSK_WITH_ARIA_128_GCM_SHA256
[0xc06B]TLS_PSK_WITH_ARIA_256_GCM_SHA384
[0xc06C]TLS_DHE_PSK_WITH_ARIA_128_GCM_SHA256
[0xc06D]TLS_DHE_PSK_WITH_ARIA_256_GCM_SHA384
[0xc06E]TLS_RSA_PSK_WITH_ARIA_128_GCM_SHA256
[0xc06F]TLS_RSA_PSK_WITH_ARIA_256_GCM_SHA384
[0xc070]TLS_ECDHE_PSK_WITH_ARIA_128_CBC_SHA256
[0xc071]TLS_ECDHE_PSK_WITH_ARIA_256_CBC_SHA384
[0xc072]ECDHE-ECDSA-CAMELLIA128-SHA256ECDHCamellia128TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256
[0xc073]ECDHE-ECDSA-CAMELLIA256-SHA38ECDHCamellia256TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384
[0xc074]ECDH-ECDSA-CAMELLIA128-SHA256ECDH/ECDSACamellia128TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256
[0xc075]ECDH-ECDSA-CAMELLIA256-SHA384ECDH/ECDSACamellia256TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384
[0xc076]ECDHE-RSA-CAMELLIA128-SHA256ECDHCamellia128TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
[0xc077]ECDHE-RSA-CAMELLIA256-SHA384ECDHCamellia256TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384
[0xc078]ECDH-RSA-CAMELLIA128-SHA256ECDH/RSACamellia128TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256
[0xc079]ECDH-RSA-CAMELLIA256-SHA384ECDH/RSACamellia256TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384
[0xc07A]TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256
[0xc07B]TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384
[0xc07C]TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256
[0xc07D]TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384
[0xc07E]TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256
[0xc07F]TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384
[0xc080]TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256
[0xc081]TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384
[0xc082]TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256
[0xc083]TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384
[0xc084]TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256
[0xc085]TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384
[0xc086]TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
[0xc087]TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
[0xc088]TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
[0xc089]TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
[0xc08A]TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256
[0xc08B]TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384
[0xc08C]TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256
[0xc08D]TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384
[0xc08E]TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256
[0xc08F]TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384
[0xc090]TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256
[0xc091]TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384
[0xc092]TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256
[0xc093]TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384
[0xc094]PSK-CAMELLIA128-SHA256PSKCAMELLIA128TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256
[0xc095]PSK-CAMELLIA256-SHA384PSKCAMELLIA256TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384
[0xc096]DHE-PSK-CAMELLIA128-SHA256PSK/DHECAMELLIA128TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256
[0xc097]DHE-PSK-CAMELLIA256-SHA384PSK/DHECAMELLIA256TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384
[0xc098]RSA-PSK-CAMELLIA128-SHA256PSK/RSACAMELLIA128TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256
[0xc099]RSA-PSK-CAMELLIA256-SHA384PSK/RSACAMELLIA256TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384
[0xc09A]ECDHE-PSK-CAMELLIA128-SHA256PSK/ECDHECAMELLIA128TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256
[0xc09B]ECDHE-PSK-CAMELLIA256-SHA384PSK/ECDHECAMELLIA256TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384
[0xc09c]AES128-CCMRSAAESCCM128TLS_RSA_WITH_AES_128_CCM
[0xc09d]AES256-CCMRSAAESCCM256TLS_RSA_WITH_AES_256_CCM
[0xc09e]DHE-RSA-AES128-CCMDHAESCCM128TLS_DHE_RSA_WITH_AES_128_CCM
[0xc09f]DHE-RSA-AES256-CCMDHAESCCM256TLS_DHE_RSA_WITH_AES_256_CCM
[0xc0a0]AES128-CCM8RSAAESCCM8128TLS_RSA_WITH_AES_128_CCM_8
[0xc0a1]AES256-CCM8RSAAESCCM8256TLS_RSA_WITH_AES_256_CCM_8
[0xc0a2]DHE-RSA-AES128-CCM8DHAESCCM8128TLS_DHE_RSA_WITH_AES_128_CCM_8
[0xc0a3]DHE-RSA-AES256-CCM8DHAESCCM8256TLS_DHE_RSA_WITH_AES_256_CCM_8
[0xc0a4]PSK-AES128-CCMPSKAESCCM128TLS_PSK_WITH_AES_128_CCM
[0xc0a5]PSK-AES256-CCMPSKAESCCM256TLS_PSK_WITH_AES_256_CCM
[0xc0a6]DHE-PSK-AES128-CCMPSK/DHEAESCCM128TLS_DHE_PSK_WITH_AES_128_CCM
[0xc0a7]DHE-PSK-AES256-CCMPSK/DHEAESCCM256TLS_DHE_PSK_WITH_AES_256_CCM
[0xc0a8]PSK-AES128-CCM8PSKAESCCM128TLS_PSK_WITH_AES_128_CCM_8
[0xc0a9]PSK-AES256-CCM8PSKAESCCM256TLS_PSK_WITH_AES_256_CCM_8
[0xc0aa]DHE-PSK-AES128-CCM8PSK/DHEAESCCM128TLS_PSK_DHE_WITH_AES_128_CCM_8
[0xc0ab]DHE-PSK-AES256-CCM8PSK/DHEAESCCM256TLS_PSK_DHE_WITH_AES_256_CCM_8
[0xc0ac]ECDHE-ECDSA-AES128-CCMECDHAESCCM128TLS_ECDHE_ECDSA_WITH_AES_128_CCM
[0xc0ad]ECDHE-ECDSA-AES256-CCMECDHAESCCM256TLS_ECDHE_ECDSA_WITH_AES_256_CCM
[0xc0ae]ECDHE-ECDSA-AES128-CCM8ECDHAESCCM128TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8
[0xc0af]ECDHE-ECDSA-AES256-CCM8ECDHAESCCM256TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8
[0xcc13]ECDHE-RSA-CHACHA20-POLY1305-OLDECDHChaCha20-Poly1305TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256_OLD
[0xcc14]ECDHE-ECDSA-CHACHA20-POLY1305-OLDECDHChaCha20-Poly1305TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256_OLD
[0xcc15]DHE-RSA-CHACHA20-POLY1305-OLDDHChaCha20-Poly1305TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256_OLD
[0xcca8]ECDHE-RSA-CHACHA20-POLY1305ECDHChaCha20-Poly1305256TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
[0xcca9]ECDHE-ECDSA-CHACHA20-POLY1305ECDHChaCha20-Poly1305256TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
[0xccaa]DHE-RSA-CHACHA20-POLY1305DHChaCha20-Poly1305256TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256
[0xccab]PSK-CHACHA20-POLY1305PSKChaCha20-Poly1305256TLS_PSK_WITH_CHACHA20_POLY1305_SHA256
[0xccac]ECDHE-PSK-CHACHA20-POLY1305ECDH/PSKChaCha20-Poly1305256TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256
[0xccad]DHE-PSK-CHACHA20-POLY1305DH/PSKChaCha20-Poly1305256TLS_DHE_PSK_WITH_CHACHA20_POLY1305_SHA256
[0xccae]RSA-PSK-CHACHA20-POLY1305RSA/PSKChaCha20-Poly1305256TLS_RSA_PSK_WITH_CHACHA20_POLY1305_SHA256
[0xff00]GOST-MD5RSAGOST89256TLS_GOSTR341094_RSA_WITH_28147_CNT_MD5
[0xff01]GOST-GOST94RSAGOST89256TLS_RSA_WITH_28147_CNT_GOST94
[0xff02]GOST-GOST89MACRSAGOST89256
[0xff03]GOST-GOST89STREAMRSAGOST89256
[0xfefe]RSADES56SSL_RSA_FIPS_WITH_DES_CBC_SHA
[0xfeff]RSA3DES168SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA
[0xfee0]RSA3DES168SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA
[0xfee1]RSADES56SSL_RSA_FIPS_WITH_DES_CBC_SHA
[0x010080]RC4-MD5RSARC4128SSL_CK_RC4_128_WITH_MD5
[0x020080]EXP-RC4-MD5RSA(512)RC440, exportSSL_CK_RC4_128_EXPORT40_WITH_MD5
[0x030080]RC2-CBC-MD5RSARC2128SSL_CK_RC2_128_CBC_WITH_MD5
[0x040080]EXP-RC2-CBC-MD5RSA(512)RC240, exportSSL_CK_RC2_128_CBC_EXPORT40_WITH_MD5
[0x050080]IDEA-CBC-MD5RSAIDEA128SSL_CK_IDEA_128_CBC_WITH_MD5
[0x060040]DES-CBC-MD5RSADES56SSL_CK_DES_64_CBC_WITH_MD5
[0x060140]DES-CBC-SHARSADES56SSL_CK_DES_64_CBC_WITH_SHA
[0x0700c0]DES-CBC3-MD5RSA3DES168SSL_CK_DES_192_EDE3_CBC_WITH_MD5
[0x0701c0]DES-CBC3-SHARSA3DES168SSL_CK_DES_192_EDE3_CBC_WITH_SHA
[0x080080]RC4-64-MD5RSARC464SSL_CK_RC4_64_WITH_MD5
[0xff0800]DES-CFB-M1RSADES64SSL_CK_DES_64_CFB64_WITH_MD5_1
[0xff0810]NULLNoneNull0SSL_CK_NULL

参考链接

对应关系转换表:https://testssl.sh/openssl-iana.mapping.html

Centos7加密漏洞修复 漏洞修复1、`SSL Medium Strength Cipher Suites Supported (SWEET32)` && `TLS Version 1.0 Protocol Detection`2、`HSTS Missing From HTTPS Server (RFC 6797)`3、`SSH Weak Key Exchange Algorithms Enabled` && `SSH Server CBC Mode Ciphers Enabled` 1、SSL Me 阅读详情

相关推荐

别再被SSL握手失败搞懵了!用SSL Labs Server Test快速定位并解决Cipher Suites不匹配问题

本文详细解析了SSL握手失败的常见原因,特别是Cipher Suites不匹配问题,并介绍了如何使用SSL Labs Server Test工具快速定位和解决。通过实战案例和配置建议,帮助开发者高效排查SSL/TLS通信故障,确保系统安全稳定运行。

weixin_30300225的博客 398

python生成的exe无法使用charles抓取到包

您可以将SSL证书嵌入到您的Python代码中,以确保只有您的程序可以访问您的服务器。另外,charles的ssl setting里导入程序的cacert.pem也可以,不过程序pem里面包括了太多的证书,还是把charles的证书粘贴到程序的证书文件里要简单写。打开保存的这个charles证书文件,把里面的内容复制出来粘贴到程序的cacert.pem里保存。在上面的代码中,我们首先读取了SSL证书文件,并将其存储在量ssl_cert中。搜了很多这个问题的解决方法,都是已经尝试过的方式,还是不行。

yjack007的专栏 1678

Git SSL握手失败怎么办?零基础解决GnuTLS与OpenSSL兼容问题

SSL/TLS是现代HTTPS通信的基石,其核心在于客户端与服务器间安全握手的可靠性。当Git在Windows平台报出curl 56、GnuTLS recv error或decryption failed等错误时,本质是加密后端(如GnuTLS)与服务端TLS协议(如TLS 1.3、ALPN扩展)不兼容所致,而非网络或代理问题。GnuTLS因对Let’s Encrypt新证书链、SNI及ALPN支持不全,常导致握手阶段即中断;而OpenSSL具备更强的协议回退与证书容错能力,成为更稳健的替代方案。该问题广泛

weixin_29741447的博客 244

如何修复“SSL 握手失败”

为您的网站设置安全套接字层(SSL)证书从来都不是简单的事。您可以免费生成证书,也可以由托管服务提供商给您安装证书,但是,如果您没有正确地配置您的证书,您可能会遇到诸如“SSL握手失败”等问题。 当您的浏览器和网站服务器无法建立安全连接时,会出现“SSL握手失败”错误。本文将解释什么是SSL握手,以及如果建立握手失败时,该如何做。 跟我们一起去看看吧! 什么叫SSL握手呢? 您可能知道,SSL证书可以证明您网站的“身份”。它使用浏览器检查的加密密钥来确保证书的有效性。连接建立后,您的浏览器可以解密服

SSL加密技术 1万+

openssl: 错误SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED

文章目录错误envoyAWS总结的可能原因 错误 2021-11-15 03:35:51.692][359][debug][connection] [source/extensions/transport_sockets/tls/ssl_socket.cc:225] [C8] TLS error: 268435581:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED [2021-11-15 03:35:51.692][359][debug][co

mzhan017的博客 1万+

解决物联网设备SSL握手失败:AWS S3 CDN证书链不匹配问题及解决方案

我们的智能设备需要通过CDN加速从AWS S3存储桶下载固件更新和配置文件。设备端嵌入式系统预装了根证书用于SSL验证,但在访问域名时出现了握手失败的问题。通过OpenSSL调试命令查看: 发现握手过程中验证失败,设备无法建立安全连接。首先,我们需要了解SSL/TLS握手过程中的证书验证原理:1. 发送ClientHello2. 发送ServerHello和证书链3. 验证证书链4a. 验证成功4b. 验证失败检查服务器证书是否由设备信任的根CA签发证书验证验证证书链完整性检查证书是否过期验证域名是否匹配证

探索云原生与智能化驱动下的安全运维新范式。关注DevSecOps、可观测性、AIOps等前沿领域,与您共赴技术前沿。 485

AI如何快速解决SSL握手失败问题

SSL握手失败可能由多种原因导致,比如证书链不完整、协议版本不匹配、密码套件不支持等。传统解决方式需要手动检查证书、配置SSLContext,过程繁琐且容易遗漏关键步骤。的AI辅助开发功能。我实际使用中发现,它的Kimi-K2模型能准确理解技术问题,生成的代码不仅解决了SSL握手错误,还包含了我没想到的边界情况处理,大大缩短了调试时间。这个错误让我卡了大半天,直到我尝试用AI辅助开发工具才快速定位并解决了问题。今天就来分享一下这个问题的解决思路和过程。通过AI驱动的开发平台(如。遇到类似问题时,推荐试试。

SnowflakeJaguar14的博客 732

Claude Skills:不是更聪明,而是更“像专家”的 Agent 养成方法

Claude Skills 不是在告诉 Agent“你能做什么”, 而是在约束它“你应该如何思考、如何判断、如何给结论”。

测试者家园 1296

SSL/TLS握手失败:常见问题与解决方案

文章摘要:在使用 curl 命令访问 https://zhongyuele.top/api/banner/getIndexBanner 时,虽然成功解析域名并建立 TCP 连接,但在 SSL/TLS 握手阶段失败,提示“Connection was reset”。常见原因包括 Nginx 的 SSL/TLS 配置错误、证书不可信或过期、Nginx 服务异常、防火墙限制等。建议检查 Nginx 配置、证书有效性、服务状态及防火墙设置。临时绕过 SSL 校验可使用 curl -k 参数测试。进一步测试可通过 H

爱的叹息的专栏 8157

人工智能在高中教育中的应用现状剖析与挑战应对

人工智能在高中教育中的应用现状剖析与挑战应对

燕鹏 1341

Excel数据清洗实战:8个必学函数搞定90%的脏数据问题(附案例)

本文通过一个完整的销售数据清洗案例,详细讲解了如何组合使用TRIM、CLEAN、SUBSTITUTE等8个核心Excel函数,构建自动化清洗流水线,高效解决日常办公中90%的脏数据问题,从而将时间留给更有价值的分析工作。

weixin_29215391的博客 584

解决jdk1.8发送邮件SSL握手失败问题

今天在写一个邮件发送Demo的时候,出现了下面的问题 发送邮件失败Mail server connection failed; nested exception is javax.mail.MessagingException: Could not connect to SMTP host: smtp.qq.com, port: 465; nested exception is

Tlsy的博客 5586

一文介绍Linux EAS

EAS只在系统负载不重时,即系统中每个CPU的利用率都低于其算力的80%时才被启用,而且选出的最节能CPU只有比线程当前运行的CPU节约能量大于6%时,线程才会迁移到该CPU运行。因此EAS为线程选择最节约能量的CPU来运行的前提条件是很苛刻的,针对重载场景(比如游戏),EAS的功能应该很少被使用起来,针对重载场景的功耗优化,这里可能是一个值得尝试的点。算力(capacity)是CPU调度中的一个基础概念,它反映的是一个CPU的计算能力,是个规格化的值,可以通过读取Android手机的文件节点。

youzhangjing_的博客 1235

解决SSL握手失败问题:SSLHandshakeException: Received fatal alert: handshake_failure

异常情况如下:JDK版本中安全机制导致,不同https安全协议不一致,TLS协议版本越高,HTTPS通信的安全性越高,但是相较于低版本TLS协议,高版本TLS协议对浏览器的兼容性较差。我方系统是jdk1.7默认使用TLSV1.0,对方系统是jdk1.8默认使用TLSV1.2,导致出现异常。

lendsomething的博客 1304

C#与Vector XL驱动库实战:CAN通道配置与端口访问详解

本文详细解析了使用C#调用Vector XL驱动库进行CAN总线通信开发的核心步骤。重点阐述了如何通过XL_GetDriverConfig获取硬件通道信息,并厘清channelMask与accessMask的区别与转换关系,最终指导开发者正确使用XL_OpenPort函数配置并打开CAN端口,为构建稳定的汽车电子测试与诊断应用奠定基础。

weixin_28452161的博客 362

微信小程序 - 实现客户支付订单连接小票打印机自动打印订单小票功能,微信小程序如何对接小票打印机自动打印小票,小程序收到新订单的时候可以联动商家打印出小票/单据/标签/发货单/电子面单等(详细教程)

微信小程序调用小票打印机,小程序接单后小票机自动打印订单,微信小程序云开发订单微信支付与小票和标签打印的完整高效流程,如何实现微信订单连接小票打印机并自动接单打印,微信小程序连接打印机打印单据小票打印,微信小程序云开发调用小票打印机实现方案,微信小程序怎么配置小票打印机,微信支付电子小票,外卖小程序实战-接单后小票机自动打印订单,微信小程序连接蓝牙打印小票,打印购物小票,调用小票打印机打印小票,微信订单如何连接小票打印机并实现自动接单打印,实现微信订单连接小票打印机并自动接单打印,微信小程序小票打印机打印教

🏆 前端领域优质创作者 1万+

Jellyfin Android TV客户端SSL握手失败问题分析与解决方案

近期有用户报告在Fire TV设备上使用Jellyfin Android TV客户端(版本0.16.11)时遇到SSL握手失败的问题。该问题出现在用户更新了GoDaddy SSL证书后,尽管其他设备和平台(包括iOS设备、网页浏览器等)都能正常连接,但Fire TV设备却无法建立安全连接。 ## 技术分析 ### 根本原因 经过排查,发现这是由Fire OS(基于Android)的TLS实现...

gitblog_07681的博客 632

使用PostgreSQL构建高可用数据库集群

在现代企业级应用中,数据库的高可用性已成为业务连续性的核心要求。PostgreSQL作为一款功能强大的开源关系型数据库,其高可用架构的设计直接影响着系统的稳定性和可靠性。

九天的专栏 1260

解决之道:处理Nginx负载均衡中的SSL握手失败问题

通过本文的分析和讨论,你应该能够了解SSL握手失败的原因,并掌握在Nginx负载均衡中处理这些问题的方法。随着网络安全形势的不断变化,持续监控和更新SSL/TLS配置是确保Web应用安全的关键。Nginx 是一种广泛使用的高性能 HTTP 服务器和反向代理,支持SSL/TLS协议,可以为Web应用提供安全的连接。然而,在配置SSL/TLS时,可能会遇到SSL握手失败的问题,这会导致客户端无法建立安全的连接。在Nginx配置中指定支持的SSL/TLS版本和密码套件,以匹配客户端的能力。

2401_85763803的博客 1838

Pixhawk2.4.8接口及引脚定义

pixhawk2.4.8接口定义图解

加斯顿工程师的博客 8753

STM32F407中文手册

STM32f407中文手册 本参考手册面向应用开发人员,提供有关使用 STM32F405xx/07xx、STM32F415xx/17xx、 STM32F42xxx 和 STM32F43xxx 微控制器存储器与外设的完整信息。STM32F405xx/07xx、STM32F415xx/17xx、STM32F42xxx 和 STM32F43xxx 构成一个微 控制器系列,各产品具有不同的存储器大小、封装和外设。有关订购信息以及器件的机械与电气特性,请参见数据手册。有关 ARM Cortex™-M4F 内核的信息,请参见《Cortex™-M4F 技术参考手册》。

解决新版requests库连接旧的站点报错ssl握手失败的问题

后知道了问题的根本原因:目标服务器(`ggzyfw.beijing.gov.cn`)在处理一种叫做 **“椭圆曲线加密” (Elliptic Curve Cryptography, ECC)** 的现代加密技术时,存在缺陷或配置错误。服务器只能从我们给出的列表中选择一个它能正确处理的、更传统的密钥交换算法(如 `DHE` 或 `RSA`)。创建一个自定义的加密套件列表 `CIPHERS`,并明确地从这个列表中**移除了所有基于椭圆曲线的密钥交换算法**(即 `ECDHE` 和 `ECDH` 开头的那些)。

qq_68994711的博客 917

SAP B1中文培訓教材_SDK

公司内部培训资料,对开发工具 ,DIAPI, UIAPI,Add-ON有详细解说

Android Retrofit SSL握手失败问题解决方案

SSL/TLS协议是保障HTTPS通信安全的核心机制,通过非对称加密实现身份认证和密钥交换。在Android开发中,Retrofit结合OkHttp处理网络请求时,SSL握手失败是常见问题,特别是在使用自签名证书或本地测试环境时。这类问题通常源于证书验证失败、TLS版本不匹配或主机名验证错误。通过配置自定义TrustManager、调整TLS版本或修改HostnameVerifier,开发者可以解决这些兼容性问题。本文以192.168.43.73本地服务器为例,详细分析Handshake failed错误的

weixin_42653691的博客 299

Devexpress16.2.6破解工具

Devexpress16.2.6破解工具Devexpress16.2.6破解工具Devexpress16.2.6破解工具Devexpress16.2.6破解工具

霍尼韦尔SoftMaster使用说明

霍尼韦尔SoftMaster使用说明

FISCO BCOS SSL握手失败问题排查与解决方案

SSL/TLS证书验证是区块链节点通信安全的基础保障机制,其核心原理是通过非对称加密实现身份认证与密钥交换。在FISCO BCOS等联盟链平台中,SDK与节点间的TLS握手失败会导致整个通信链路中断,常见于证书配置错误、时间不同步或加密套件不兼容等场景。本文针对SSL握手失败这一典型问题,系统梳理了从网络层检查到证书链验证的全套诊断方法,特别适用于区块链开发者在部署调试过程中快速定位证书相关故障。通过openssl命令行工具验证、日志分析等工程实践手段,可有效解决证书路径错误、链不完整等高频问题,确保节点间

weixin_32239523的博客 310

Jetty服务器TLS配置避坑指南:如何解决常见SSL握手失败问题

本文针对Jetty服务器TLS配置中常见的SSL握手失败问题,提供了系统性的诊断与解决方案。文章深入剖析了协议版本不匹配、加密套件(CipherSuites)兼容性及证书链问题等根本原因,并详细介绍了使用OpenSSL等工具进行排查的流程,以及如何通过精细调整Jetty的SslContextFactory配置来平衡安全性与兼容性,帮助运维和开发人员快速定位并修复生产环境中的TLS连接故障。

tensor9flow的博客 166

macOS 下 JDBC 连接 SQL Server 报 SSL 握手失败问题排查与解决

在macOS上使用Alibaba Druid连接池和mssql-jdbc驱动连接SQL Server时出现SSL握手失败问题。经过排查发现,Homebrew安装的OpenJDK 17.0.19默认禁用了ECDH和TLS_RSA_*等关键算法,导致驱动无法完成SSL协商。解决方案是修改JDK的java.security文件,注释掉相关禁用算法配置。相比Windows环境,macOS的JDK安全策略更严格,这是导致差异的原因。建议团队统一JDK版本或配置SQL Server的SSL证书以获得更安全的连接。

qq_41087159的博客 376
上一篇: Golang小数点保留
RobertLee~~~~~~~~
博客等级 码龄18年 14粉丝 43原创
评论
成就一亿技术人!
拼手气红包6.0元
还能输入1000个字符
 
 条评论被折叠 查看
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付:10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值