基于供应商.NET 4.X的应用程序可以';t生成WSDL客户端,因为SSLv3已禁用

本文关键字:客户端 WSDL 生成 因为 SSLv3 NET 供应商 应用程序 | 更新日期: 2023-09-27 18:20:42

这个问题是供应商支持的应用程序的部分开发和部分故障排除。

问题是供应商的应用程序似乎无法连接到政府服务以生成WSDL客户端。通过故障排除,我相信我已经将问题缩小到.NET 4.0不支持Windows Server 2012 Standard上的SSLv3。

我是通过使用PowerShell发现这一点的,因为我使用的是PS版本4,所以我也使用.NET 4.0,这与应用程序使用的CLR版本相同。

PS C:'Windows> $PSVersionTable
Name                           Value                                                                                                                               
----                           -----                                                                                                                               
PSVersion                      4.0                                                                                                                                 
WSManStackVersion              3.0                                                                                                                                 
SerializationVersion           1.1.0.1                                                                                                                             
CLRVersion                     4.0.30319.34209                                                                                                                     
BuildVersion                   6.3.9600.16406                                                                                                                      
PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0}                                                                                                                
PSRemotingProtocolVersion      2.2  

如果我尝试在PowerShell中生成WSDL客户端,我会得到与应用程序相同的错误。WSDL URL位于以下网站上。

http://www.grants.gov/web/grants/s2s/applicant/versions-wsdls.html

PS C:'Windows> New-WebServiceProxy -Uri ("https://at07ws.grants.gov:446/grantsws-applicant/services/v2/ApplicantWebServicesSoapPort?wsdl") 
PS C:'Windows> $error[0] | fl -Force

writeErrorStream      : True
Exception             : System.Net.WebException: There was an error downloading 
                        'https://at07ws.grants.gov:446/grantsws-applicant/services/v2/ApplicantWebServicesSoapPort?wsdl'. ---> System.Net.WebException: The 
                        underlying connection was closed: An unexpected error occurred on a send. ---> System.IO.IOException: The handshake failed due to an 
                        unexpected packet format.
                           at System.Net.Security.SslState.StartReadFrame(Byte[] buffer, Int32 readBytes, AsyncProtocolRequest asyncRequest)
                           at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
                           at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count, AsyncProtocolRequest asyncRequest)
                           at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
                           at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
                           at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean 
                        preserveSyncCtx)
                           at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean 
                        preserveSyncCtx)
                           at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state)
                           at System.Net.TlsStream.ProcessAuthentication(LazyAsyncResult result)
                           at System.Net.TlsStream.Write(Byte[] buffer, Int32 offset, Int32 size)
                           at System.Net.ConnectStream.WriteHeaders(Boolean async)
                           --- End of inner exception stack trace ---
                           at System.Web.Services.Protocols.WebClientProtocol.GetWebResponse(WebRequest request)
                           at System.Web.Services.Protocols.HttpWebClientProtocol.GetWebResponse(WebRequest request)
                           at System.Web.Services.Discovery.DiscoveryClientProtocol.Download(String& url, String& contentType)
                           --- End of inner exception stack trace ---
                           at System.Web.Services.Discovery.DiscoveryClientProtocol.Download(String& url, String& contentType)
                           at System.Web.Services.Discovery.DiscoveryClientProtocol.DiscoverAny(String url)
                           at Microsoft.PowerShell.Commands.NewWebServiceProxy.GenerateWebServiceProxyAssembly(String NameSpace, String ClassName)
TargetObject          : https://at07ws.grants.gov:446/grantsws-applicant/services/v2/ApplicantWebServicesSoapPort?wsdl
CategoryInfo          : ObjectNotFound: (https://at07ws....esSoapPort?wsdl:Uri) [New-WebServiceProxy], WebException
FullyQualifiedErrorId : WebException,Microsoft.PowerShell.Commands.NewWebServiceProxy
ErrorDetails          : The underlying connection was closed: An unexpected error occurred on a send.
InvocationInfo        : System.Management.Automation.InvocationInfo
ScriptStackTrace      : at <ScriptBlock>, <No file>: line 1
PipelineIterationInfo : {0, 0}
PSMessageDetails      : 

我特别开始搜索这个问题/错误。

An unexpected error occurred on a send. ---> System.IO.IOException: The handshake failed due to an 
                    unexpected packet format.

在使用openssl后,我发现at07ws.grants.gov服务器似乎只支持446端口上的SSLv3。

然后我发现服务器似乎只支持TLS 1.X作为.NET 4.0版本中的客户端,我使用PowerShell和ServicePointManager SecurityProtocol属性来验证这一点。

PS C:'Windows> [System.Net.ServicePointManager]::SecurityProtocol
Tls, Tls11, Tls12

然后,我将SecurityProtocol属性设置为仅支持Ssl3,然后我就可以生成WSDL客户端了。

PS C:'Windows> [System.Net.ServicePointManager]::SecurityProtocol = 'Ssl3'
PS C:'Windows> [System.Net.ServicePointManager]::SecurityProtocol
Ssl3
PS C:'Windows> New-WebServiceProxy -Uri ("https://at07ws.grants.gov:446/grantsws-applicant/services/v2/ApplicantWebServicesSoapPort?wsdl")

SoapVersion                          : Default
AllowAutoRedirect                    : False
CookieContainer                      : 
ClientCertificates                   : {}
EnableDecompression                  : False
UserAgent                            : Mozilla/4.0 (compatible; MSIE 6.0; MS Web Services Client Protocol 4.0.30319.34209)
Proxy                                : 
UnsafeAuthenticatedConnectionSharing : False
Credentials                          : 
UseDefaultCredentials                : False
ConnectionGroupName                  : 
PreAuthenticate                      : False
Url                                  : https://at07ws.grants.gov:446/grantsws-applicant/services/v2/ApplicantWebServicesSoapPort
RequestEncoding                      : 
Timeout                              : 100000
Site                                 : 
Container                            : 

我试图在注册表中直接启用SSL 3.0,但似乎没有什么不同。

http://support.microsoft.com/kb/245030/en-us

除了在.NET/C#中设置支持的协议(供应商必须这样做)之外,是否有办法在服务器上启用/禁用支持的协议?是否有我可以在其中设置的.NET配置?

供应商声称这在他们的服务器上运行良好。

谢谢!

基于供应商.NET 4.X的应用程序可以';t生成WSDL客户端,因为SSLv3已禁用

我发现,如果您安装了KB2898850,默认情况下SSL3将关闭,KB245030中描述的注册表设置将被忽略。我建议在07ws.grants.gov上找到可以更新以支持TLS的web服务。否则,解决方法是卸载KB2898850。

除了在.NET/C#中设置支持的协议(供应商必须这样做)之外,是否有办法在服务器上启用/禁用支持的协议?

服务器的配置很奇怪,我相信我从来没有遇到过。我想听听它背后的原因…

无论如何,下面列出了协议和密码套件。

然后,有一个s_client测试,以确保ADH-DES-CBC-SHA在独立测试期间实际工作。


$ sslscan --no-failed at07ws.grants.gov:446
                   _
           ___ ___| |___  ___ __ _ _ __
          / __/ __| / __|/ __/ _` | '_ '
          '__ '__ ' '__ ' (_| (_| | | | |
          |___/___/_|___/'___'__,_|_| |_|
                  Version 1.8.2
             http://www.titania.co.uk
        Copyright Ian Ventura-Whiting 2009
Testing SSL server at07ws.grants.gov on port 446
  Supported Server Cipher(s):
    Accepted  SSLv3  128 bits  ADH-RC4-MD5
    Accepted  SSLv3  40 bits   EXP-ADH-RC4-MD5
    Accepted  TLSv1  128 bits  ADH-RC4-MD5
    Accepted  TLSv1  112 bits  ADH-DES-CBC3-SHA
    Accepted  TLSv1  56 bits   ADH-DES-CBC-SHA
    Accepted  TLSv1  40 bits   EXP-ADH-DES-CBC-SHA
    Accepted  TLSv1  40 bits   EXP-ADH-RC4-MD5
  Prefered Server Cipher(s):

$ echo -e "GET /grantsws-applicant/services/v2/ApplicantWebServicesSoapPort?wsdl'r'n" | '
      openssl s_client -connect at07ws.grants.gov:446 -tls1 -cipher ADH-DES-CBC-SHA -ign_eof
CONNECTED(00000003)
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 395 bytes and written 254 bytes
---
New, TLSv1/SSLv3, Cipher is ADH-DES-CBC-SHA
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : TLSv1
    Cipher    : ADH-DES-CBC-SHA
    Session-ID: 3AF8B288FED9AAC39B97A08FD40F4CAE
    Session-ID-ctx: 
    Master-Key: 97B982A3CE1EE4F55C4A188C5B223A64
                865141A590E2AD97A9796FD94EEA5919
                96062BE22113EC38B9978DCC07099C3C
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1409857350
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
---
HTTP/1.1 200 OK
Connection: close
Date: Thu, 04 Sep 2014 19:01:50 GMT
Content-Length: 10513
Content-Type: text/xml;charset=utf-8
X-Powered-By: Servlet/2.5 JSP/2.1
<?xml version='1.0' encoding='UTF-8'?>
<!-- Published by JAX-WS RI at http://jax-ws.dev.java.net. RI's version is Oracle JAX-WS 2.1.5. -->
<!-- Generated by JAX-WS RI at http://jax-ws.dev.java.net. RI's version is Oracle JAX-WS 2.1.5. -->
<definitions xmlns:wssutil="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy" xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/"
xmlns:tns="http://apply.grants.gov/services/ApplicantWebServices-V2.0"
xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://schemas.xmlsoap.org/wsdl/" 
targetNamespace="http://apply.grants.gov/services/ApplicantWebServices-V2.0" 
name="ApplicantWebServices-V2.0">
...

$ sslscan at07ws.grants.gov:446
...
Testing SSL server at07ws.grants.gov on port 446
  Supported Server Cipher(s):
    Failed    SSLv3  256 bits  ECDHE-RSA-AES256-GCM-SHA384
    Failed    SSLv3  256 bits  ECDHE-ECDSA-AES256-GCM-SHA384
    Failed    SSLv3  256 bits  ECDHE-RSA-AES256-SHA384
    Failed    SSLv3  256 bits  ECDHE-ECDSA-AES256-SHA384
    Rejected  SSLv3  256 bits  ECDHE-RSA-AES256-SHA
    Rejected  SSLv3  256 bits  ECDHE-ECDSA-AES256-SHA
    Failed    SSLv3  256 bits  SRP-DSS-AES-256-CBC-SHA
    Failed    SSLv3  256 bits  SRP-RSA-AES-256-CBC-SHA
    Failed    SSLv3  256 bits  SRP-AES-256-CBC-SHA
    Failed    SSLv3  256 bits  DHE-DSS-AES256-GCM-SHA384
    Failed    SSLv3  256 bits  DHE-RSA-AES256-GCM-SHA384
    Failed    SSLv3  256 bits  DHE-RSA-AES256-SHA256
    Failed    SSLv3  256 bits  DHE-DSS-AES256-SHA256
    Rejected  SSLv3  256 bits  DHE-RSA-AES256-SHA
    Rejected  SSLv3  256 bits  DHE-DSS-AES256-SHA
    Rejected  SSLv3  256 bits  DHE-RSA-CAMELLIA256-SHA
    Rejected  SSLv3  256 bits  DHE-DSS-CAMELLIA256-SHA
    Rejected  SSLv3  256 bits  AECDH-AES256-SHA
    Failed    SSLv3  256 bits  ADH-AES256-GCM-SHA384
    Failed    SSLv3  256 bits  ADH-AES256-SHA256
    Rejected  SSLv3  256 bits  ADH-AES256-SHA
    Rejected  SSLv3  256 bits  ADH-CAMELLIA256-SHA
    Failed    SSLv3  256 bits  ECDH-RSA-AES256-GCM-SHA384
    Failed    SSLv3  256 bits  ECDH-ECDSA-AES256-GCM-SHA384
    Failed    SSLv3  256 bits  ECDH-RSA-AES256-SHA384
    Failed    SSLv3  256 bits  ECDH-ECDSA-AES256-SHA384
    Rejected  SSLv3  256 bits  ECDH-RSA-AES256-SHA
    Rejected  SSLv3  256 bits  ECDH-ECDSA-AES256-SHA
    Failed    SSLv3  256 bits  AES256-GCM-SHA384
    Failed    SSLv3  256 bits  AES256-SHA256
    Failed    SSLv3  256 bits  AES256-SHA
    Rejected  SSLv3  256 bits  CAMELLIA256-SHA
    Failed    SSLv3  256 bits  PSK-AES256-CBC-SHA
    Failed    SSLv3  128 bits  ECDHE-RSA-AES128-GCM-SHA256
    Failed    SSLv3  128 bits  ECDHE-ECDSA-AES128-GCM-SHA256
    Failed    SSLv3  128 bits  ECDHE-RSA-AES128-SHA256
    Failed    SSLv3  128 bits  ECDHE-ECDSA-AES128-SHA256
    Rejected  SSLv3  128 bits  ECDHE-RSA-AES128-SHA
    Rejected  SSLv3  128 bits  ECDHE-ECDSA-AES128-SHA
    Failed    SSLv3  128 bits  SRP-DSS-AES-128-CBC-SHA
    Failed    SSLv3  128 bits  SRP-RSA-AES-128-CBC-SHA
    Failed    SSLv3  128 bits  SRP-AES-128-CBC-SHA
    Failed    SSLv3  128 bits  DHE-DSS-AES128-GCM-SHA256
    Failed    SSLv3  128 bits  DHE-RSA-AES128-GCM-SHA256
    Failed    SSLv3  128 bits  DHE-RSA-AES128-SHA256
    Failed    SSLv3  128 bits  DHE-DSS-AES128-SHA256
    Rejected  SSLv3  128 bits  DHE-RSA-AES128-SHA
    Rejected  SSLv3  128 bits  DHE-DSS-AES128-SHA
    Rejected  SSLv3  128 bits  DHE-RSA-SEED-SHA
    Rejected  SSLv3  128 bits  DHE-DSS-SEED-SHA
    Rejected  SSLv3  128 bits  DHE-RSA-CAMELLIA128-SHA
    Rejected  SSLv3  128 bits  DHE-DSS-CAMELLIA128-SHA
    Rejected  SSLv3  128 bits  AECDH-AES128-SHA
    Failed    SSLv3  128 bits  ADH-AES128-GCM-SHA256
    Failed    SSLv3  128 bits  ADH-AES128-SHA256
    Rejected  SSLv3  128 bits  ADH-AES128-SHA
    Rejected  SSLv3  128 bits  ADH-SEED-SHA
    Rejected  SSLv3  128 bits  ADH-CAMELLIA128-SHA
    Failed    SSLv3  128 bits  ECDH-RSA-AES128-GCM-SHA256
    Failed    SSLv3  128 bits  ECDH-ECDSA-AES128-GCM-SHA256
    Failed    SSLv3  128 bits  ECDH-RSA-AES128-SHA256
    Failed    SSLv3  128 bits  ECDH-ECDSA-AES128-SHA256
    Rejected  SSLv3  128 bits  ECDH-RSA-AES128-SHA
    Rejected  SSLv3  128 bits  ECDH-ECDSA-AES128-SHA
    Failed    SSLv3  128 bits  AES128-GCM-SHA256
    Failed    SSLv3  128 bits  AES128-SHA256
    Failed    SSLv3  128 bits  AES128-SHA
    Rejected  SSLv3  128 bits  SEED-SHA
    Rejected  SSLv3  128 bits  CAMELLIA128-SHA
    Rejected  SSLv3  128 bits  IDEA-CBC-SHA
    Failed    SSLv3  128 bits  PSK-AES128-CBC-SHA
    Rejected  SSLv3  128 bits  ECDHE-RSA-RC4-SHA
    Rejected  SSLv3  128 bits  ECDHE-ECDSA-RC4-SHA
    Rejected  SSLv3  128 bits  AECDH-RC4-SHA
    Accepted  SSLv3  128 bits  ADH-RC4-MD5
    Rejected  SSLv3  128 bits  ECDH-RSA-RC4-SHA
    Rejected  SSLv3  128 bits  ECDH-ECDSA-RC4-SHA
    Failed    SSLv3  128 bits  RC4-SHA
    Failed    SSLv3  128 bits  RC4-MD5
    Failed    SSLv3  128 bits  PSK-RC4-SHA
    Rejected  SSLv3  112 bits  ECDHE-RSA-DES-CBC3-SHA
    Rejected  SSLv3  112 bits  ECDHE-ECDSA-DES-CBC3-SHA
    Failed    SSLv3  112 bits  SRP-DSS-3DES-EDE-CBC-SHA
    Failed    SSLv3  112 bits  SRP-RSA-3DES-EDE-CBC-SHA
    Failed    SSLv3  112 bits  SRP-3DES-EDE-CBC-SHA
    Failed    SSLv3  112 bits  EDH-RSA-DES-CBC3-SHA
    Rejected  SSLv3  112 bits  EDH-DSS-DES-CBC3-SHA
    Rejected  SSLv3  112 bits  AECDH-DES-CBC3-SHA
    Rejected  SSLv3  112 bits  ADH-DES-CBC3-SHA
    Rejected  SSLv3  112 bits  ECDH-RSA-DES-CBC3-SHA
    Rejected  SSLv3  112 bits  ECDH-ECDSA-DES-CBC3-SHA
    Failed    SSLv3  112 bits  DES-CBC3-SHA
    Failed    SSLv3  112 bits  PSK-3DES-EDE-CBC-SHA
    Failed    SSLv3  56 bits   EDH-RSA-DES-CBC-SHA
    Rejected  SSLv3  56 bits   EDH-DSS-DES-CBC-SHA
    Rejected  SSLv3  56 bits   ADH-DES-CBC-SHA
    Failed    SSLv3  56 bits   DES-CBC-SHA
    Failed    SSLv3  40 bits   EXP-EDH-RSA-DES-CBC-SHA
    Rejected  SSLv3  40 bits   EXP-EDH-DSS-DES-CBC-SHA
    Rejected  SSLv3  40 bits   EXP-ADH-DES-CBC-SHA
    Failed    SSLv3  40 bits   EXP-DES-CBC-SHA
    Rejected  SSLv3  40 bits   EXP-RC2-CBC-MD5
    Accepted  SSLv3  40 bits   EXP-ADH-RC4-MD5
    Failed    SSLv3  40 bits   EXP-RC4-MD5
    Rejected  SSLv3  0 bits    ECDHE-RSA-NULL-SHA
    Rejected  SSLv3  0 bits    ECDHE-ECDSA-NULL-SHA
    Rejected  SSLv3  0 bits    AECDH-NULL-SHA
    Rejected  SSLv3  0 bits    ECDH-RSA-NULL-SHA
    Rejected  SSLv3  0 bits    ECDH-ECDSA-NULL-SHA
    Failed    SSLv3  0 bits    NULL-SHA256
    Rejected  SSLv3  0 bits    NULL-SHA
    Rejected  SSLv3  0 bits    NULL-MD5
    Failed    TLSv1  256 bits  ECDHE-RSA-AES256-GCM-SHA384
    Failed    TLSv1  256 bits  ECDHE-ECDSA-AES256-GCM-SHA384
    Failed    TLSv1  256 bits  ECDHE-RSA-AES256-SHA384
    Failed    TLSv1  256 bits  ECDHE-ECDSA-AES256-SHA384
    Rejected  TLSv1  256 bits  ECDHE-RSA-AES256-SHA
    Rejected  TLSv1  256 bits  ECDHE-ECDSA-AES256-SHA
    Failed    TLSv1  256 bits  SRP-DSS-AES-256-CBC-SHA
    Failed    TLSv1  256 bits  SRP-RSA-AES-256-CBC-SHA
    Failed    TLSv1  256 bits  SRP-AES-256-CBC-SHA
    Failed    TLSv1  256 bits  DHE-DSS-AES256-GCM-SHA384
    Failed    TLSv1  256 bits  DHE-RSA-AES256-GCM-SHA384
    Failed    TLSv1  256 bits  DHE-RSA-AES256-SHA256
    Failed    TLSv1  256 bits  DHE-DSS-AES256-SHA256
    Rejected  TLSv1  256 bits  DHE-RSA-AES256-SHA
    Rejected  TLSv1  256 bits  DHE-DSS-AES256-SHA
    Rejected  TLSv1  256 bits  DHE-RSA-CAMELLIA256-SHA
    Rejected  TLSv1  256 bits  DHE-DSS-CAMELLIA256-SHA
    Rejected  TLSv1  256 bits  AECDH-AES256-SHA
    Failed    TLSv1  256 bits  ADH-AES256-GCM-SHA384
    Failed    TLSv1  256 bits  ADH-AES256-SHA256
    Rejected  TLSv1  256 bits  ADH-AES256-SHA
    Rejected  TLSv1  256 bits  ADH-CAMELLIA256-SHA
    Failed    TLSv1  256 bits  ECDH-RSA-AES256-GCM-SHA384
    Failed    TLSv1  256 bits  ECDH-ECDSA-AES256-GCM-SHA384
    Failed    TLSv1  256 bits  ECDH-RSA-AES256-SHA384
    Failed    TLSv1  256 bits  ECDH-ECDSA-AES256-SHA384
    Rejected  TLSv1  256 bits  ECDH-RSA-AES256-SHA
    Rejected  TLSv1  256 bits  ECDH-ECDSA-AES256-SHA
    Failed    TLSv1  256 bits  AES256-GCM-SHA384
    Failed    TLSv1  256 bits  AES256-SHA256
    Failed    TLSv1  256 bits  AES256-SHA
    Rejected  TLSv1  256 bits  CAMELLIA256-SHA
    Failed    TLSv1  256 bits  PSK-AES256-CBC-SHA
    Failed    TLSv1  128 bits  ECDHE-RSA-AES128-GCM-SHA256
    Failed    TLSv1  128 bits  ECDHE-ECDSA-AES128-GCM-SHA256
    Failed    TLSv1  128 bits  ECDHE-RSA-AES128-SHA256
    Failed    TLSv1  128 bits  ECDHE-ECDSA-AES128-SHA256
    Rejected  TLSv1  128 bits  ECDHE-RSA-AES128-SHA
    Rejected  TLSv1  128 bits  ECDHE-ECDSA-AES128-SHA
    Failed    TLSv1  128 bits  SRP-DSS-AES-128-CBC-SHA
    Failed    TLSv1  128 bits  SRP-RSA-AES-128-CBC-SHA
    Failed    TLSv1  128 bits  SRP-AES-128-CBC-SHA
    Failed    TLSv1  128 bits  DHE-DSS-AES128-GCM-SHA256
    Failed    TLSv1  128 bits  DHE-RSA-AES128-GCM-SHA256
    Failed    TLSv1  128 bits  DHE-RSA-AES128-SHA256
    Failed    TLSv1  128 bits  DHE-DSS-AES128-SHA256
    Rejected  TLSv1  128 bits  DHE-RSA-AES128-SHA
    Rejected  TLSv1  128 bits  DHE-DSS-AES128-SHA
    Rejected  TLSv1  128 bits  DHE-RSA-SEED-SHA
    Rejected  TLSv1  128 bits  DHE-DSS-SEED-SHA
    Rejected  TLSv1  128 bits  DHE-RSA-CAMELLIA128-SHA
    Rejected  TLSv1  128 bits  DHE-DSS-CAMELLIA128-SHA
    Rejected  TLSv1  128 bits  AECDH-AES128-SHA
    Failed    TLSv1  128 bits  ADH-AES128-GCM-SHA256
    Failed    TLSv1  128 bits  ADH-AES128-SHA256
    Rejected  TLSv1  128 bits  ADH-AES128-SHA
    Rejected  TLSv1  128 bits  ADH-SEED-SHA
    Rejected  TLSv1  128 bits  ADH-CAMELLIA128-SHA
    Failed    TLSv1  128 bits  ECDH-RSA-AES128-GCM-SHA256
    Failed    TLSv1  128 bits  ECDH-ECDSA-AES128-GCM-SHA256
    Failed    TLSv1  128 bits  ECDH-RSA-AES128-SHA256
    Failed    TLSv1  128 bits  ECDH-ECDSA-AES128-SHA256
    Rejected  TLSv1  128 bits  ECDH-RSA-AES128-SHA
    Rejected  TLSv1  128 bits  ECDH-ECDSA-AES128-SHA
    Failed    TLSv1  128 bits  AES128-GCM-SHA256
    Failed    TLSv1  128 bits  AES128-SHA256
    Failed    TLSv1  128 bits  AES128-SHA
    Rejected  TLSv1  128 bits  SEED-SHA
    Rejected  TLSv1  128 bits  CAMELLIA128-SHA
    Rejected  TLSv1  128 bits  IDEA-CBC-SHA
    Failed    TLSv1  128 bits  PSK-AES128-CBC-SHA
    Rejected  TLSv1  128 bits  ECDHE-RSA-RC4-SHA
    Rejected  TLSv1  128 bits  ECDHE-ECDSA-RC4-SHA
    Rejected  TLSv1  128 bits  AECDH-RC4-SHA
    Accepted  TLSv1  128 bits  ADH-RC4-MD5
    Rejected  TLSv1  128 bits  ECDH-RSA-RC4-SHA
    Rejected  TLSv1  128 bits  ECDH-ECDSA-RC4-SHA
    Failed    TLSv1  128 bits  RC4-SHA
    Failed    TLSv1  128 bits  RC4-MD5
    Failed    TLSv1  128 bits  PSK-RC4-SHA
    Rejected  TLSv1  112 bits  ECDHE-RSA-DES-CBC3-SHA
    Rejected  TLSv1  112 bits  ECDHE-ECDSA-DES-CBC3-SHA
    Failed    TLSv1  112 bits  SRP-DSS-3DES-EDE-CBC-SHA
    Failed    TLSv1  112 bits  SRP-RSA-3DES-EDE-CBC-SHA
    Failed    TLSv1  112 bits  SRP-3DES-EDE-CBC-SHA
    Failed    TLSv1  112 bits  EDH-RSA-DES-CBC3-SHA
    Rejected  TLSv1  112 bits  EDH-DSS-DES-CBC3-SHA
    Rejected  TLSv1  112 bits  AECDH-DES-CBC3-SHA
    Accepted  TLSv1  112 bits  ADH-DES-CBC3-SHA
    Rejected  TLSv1  112 bits  ECDH-RSA-DES-CBC3-SHA
    Rejected  TLSv1  112 bits  ECDH-ECDSA-DES-CBC3-SHA
    Failed    TLSv1  112 bits  DES-CBC3-SHA
    Failed    TLSv1  112 bits  PSK-3DES-EDE-CBC-SHA
    Failed    TLSv1  56 bits   EDH-RSA-DES-CBC-SHA
    Rejected  TLSv1  56 bits   EDH-DSS-DES-CBC-SHA
    Accepted  TLSv1  56 bits   ADH-DES-CBC-SHA
    Failed    TLSv1  56 bits   DES-CBC-SHA
    Failed    TLSv1  40 bits   EXP-EDH-RSA-DES-CBC-SHA
    Rejected  TLSv1  40 bits   EXP-EDH-DSS-DES-CBC-SHA
    Accepted  TLSv1  40 bits   EXP-ADH-DES-CBC-SHA
    Failed    TLSv1  40 bits   EXP-DES-CBC-SHA
    Rejected  TLSv1  40 bits   EXP-RC2-CBC-MD5
    Accepted  TLSv1  40 bits   EXP-ADH-RC4-MD5
    Failed    TLSv1  40 bits   EXP-RC4-MD5
    Rejected  TLSv1  0 bits    ECDHE-RSA-NULL-SHA
    Rejected  TLSv1  0 bits    ECDHE-ECDSA-NULL-SHA
    Rejected  TLSv1  0 bits    AECDH-NULL-SHA
    Rejected  TLSv1  0 bits    ECDH-RSA-NULL-SHA
    Rejected  TLSv1  0 bits    ECDH-ECDSA-NULL-SHA
    Failed    TLSv1  0 bits    NULL-SHA256
    Rejected  TLSv1  0 bits    NULL-SHA
    Rejected  TLSv1  0 bits    NULL-MD5
    Failed    TLSv1.1  256 bits  ECDHE-RSA-AES256-GCM-SHA384
    Failed    TLSv1.1  256 bits  ECDHE-ECDSA-AES256-GCM-SHA384
    Failed    TLSv1.1  256 bits  ECDHE-RSA-AES256-SHA384
    Failed    TLSv1.1  256 bits  ECDHE-ECDSA-AES256-SHA384
    Failed    TLSv1.1  256 bits  ECDHE-RSA-AES256-SHA
    Failed    TLSv1.1  256 bits  ECDHE-ECDSA-AES256-SHA
    Failed    TLSv1.1  256 bits  SRP-DSS-AES-256-CBC-SHA
    Failed    TLSv1.1  256 bits  SRP-RSA-AES-256-CBC-SHA
    Failed    TLSv1.1  256 bits  SRP-AES-256-CBC-SHA
    Failed    TLSv1.1  256 bits  DHE-DSS-AES256-GCM-SHA384
    Failed    TLSv1.1  256 bits  DHE-RSA-AES256-GCM-SHA384
    Failed    TLSv1.1  256 bits  DHE-RSA-AES256-SHA256
    Failed    TLSv1.1  256 bits  DHE-DSS-AES256-SHA256
    Failed    TLSv1.1  256 bits  DHE-RSA-AES256-SHA
    Failed    TLSv1.1  256 bits  DHE-DSS-AES256-SHA
    Failed    TLSv1.1  256 bits  DHE-RSA-CAMELLIA256-SHA
    Failed    TLSv1.1  256 bits  DHE-DSS-CAMELLIA256-SHA
    Failed    TLSv1.1  256 bits  AECDH-AES256-SHA
    Failed    TLSv1.1  256 bits  ADH-AES256-GCM-SHA384
    Failed    TLSv1.1  256 bits  ADH-AES256-SHA256
    Failed    TLSv1.1  256 bits  ADH-AES256-SHA
    Failed    TLSv1.1  256 bits  ADH-CAMELLIA256-SHA
    Failed    TLSv1.1  256 bits  ECDH-RSA-AES256-GCM-SHA384
    Failed    TLSv1.1  256 bits  ECDH-ECDSA-AES256-GCM-SHA384
    Failed    TLSv1.1  256 bits  ECDH-RSA-AES256-SHA384
    Failed    TLSv1.1  256 bits  ECDH-ECDSA-AES256-SHA384
    Failed    TLSv1.1  256 bits  ECDH-RSA-AES256-SHA
    Failed    TLSv1.1  256 bits  ECDH-ECDSA-AES256-SHA
    Failed    TLSv1.1  256 bits  AES256-GCM-SHA384
    Failed    TLSv1.1  256 bits  AES256-SHA256
    Failed    TLSv1.1  256 bits  AES256-SHA
    Failed    TLSv1.1  256 bits  CAMELLIA256-SHA
    Failed    TLSv1.1  256 bits  PSK-AES256-CBC-SHA
    Failed    TLSv1.1  128 bits  ECDHE-RSA-AES128-GCM-SHA256
    Failed    TLSv1.1  128 bits  ECDHE-ECDSA-AES128-GCM-SHA256
    Failed    TLSv1.1  128 bits  ECDHE-RSA-AES128-SHA256
    Failed    TLSv1.1  128 bits  ECDHE-ECDSA-AES128-SHA256
    Failed    TLSv1.1  128 bits  ECDHE-RSA-AES128-SHA
    Failed    TLSv1.1  128 bits  ECDHE-ECDSA-AES128-SHA
    Failed    TLSv1.1  128 bits  SRP-DSS-AES-128-CBC-SHA
    Failed    TLSv1.1  128 bits  SRP-RSA-AES-128-CBC-SHA
    Failed    TLSv1.1  128 bits  SRP-AES-128-CBC-SHA
    Failed    TLSv1.1  128 bits  DHE-DSS-AES128-GCM-SHA256
    Failed    TLSv1.1  128 bits  DHE-RSA-AES128-GCM-SHA256
    Failed    TLSv1.1  128 bits  DHE-RSA-AES128-SHA256
    Failed    TLSv1.1  128 bits  DHE-DSS-AES128-SHA256
    Failed    TLSv1.1  128 bits  DHE-RSA-AES128-SHA
    Failed    TLSv1.1  128 bits  DHE-DSS-AES128-SHA
    Failed    TLSv1.1  128 bits  DHE-RSA-SEED-SHA
    Failed    TLSv1.1  128 bits  DHE-DSS-SEED-SHA
    Failed    TLSv1.1  128 bits  DHE-RSA-CAMELLIA128-SHA
    Failed    TLSv1.1  128 bits  DHE-DSS-CAMELLIA128-SHA
    Failed    TLSv1.1  128 bits  AECDH-AES128-SHA
    Failed    TLSv1.1  128 bits  ADH-AES128-GCM-SHA256
    Failed    TLSv1.1  128 bits  ADH-AES128-SHA256
    Failed    TLSv1.1  128 bits  ADH-AES128-SHA
    Failed    TLSv1.1  128 bits  ADH-SEED-SHA
    Failed    TLSv1.1  128 bits  ADH-CAMELLIA128-SHA
    Failed    TLSv1.1  128 bits  ECDH-RSA-AES128-GCM-SHA256
    Failed    TLSv1.1  128 bits  ECDH-ECDSA-AES128-GCM-SHA256
    Failed    TLSv1.1  128 bits  ECDH-RSA-AES128-SHA256
    Failed    TLSv1.1  128 bits  ECDH-ECDSA-AES128-SHA256
    Failed    TLSv1.1  128 bits  ECDH-RSA-AES128-SHA
    Failed    TLSv1.1  128 bits  ECDH-ECDSA-AES128-SHA
    Failed    TLSv1.1  128 bits  AES128-GCM-SHA256
    Failed    TLSv1.1  128 bits  AES128-SHA256
    Failed    TLSv1.1  128 bits  AES128-SHA
    Failed    TLSv1.1  128 bits  SEED-SHA
    Failed    TLSv1.1  128 bits  CAMELLIA128-SHA
    Failed    TLSv1.1  128 bits  IDEA-CBC-SHA
    Failed    TLSv1.1  128 bits  PSK-AES128-CBC-SHA
    Failed    TLSv1.1  128 bits  ECDHE-RSA-RC4-SHA
    Failed    TLSv1.1  128 bits  ECDHE-ECDSA-RC4-SHA
    Failed    TLSv1.1  128 bits  AECDH-RC4-SHA
    Failed    TLSv1.1  128 bits  ADH-RC4-MD5
    Failed    TLSv1.1  128 bits  ECDH-RSA-RC4-SHA
    Failed    TLSv1.1  128 bits  ECDH-ECDSA-RC4-SHA
    Failed    TLSv1.1  128 bits  RC4-SHA
    Failed    TLSv1.1  128 bits  RC4-MD5
    Failed    TLSv1.1  128 bits  PSK-RC4-SHA
    Failed    TLSv1.1  112 bits  ECDHE-RSA-DES-CBC3-SHA
    Failed    TLSv1.1  112 bits  ECDHE-ECDSA-DES-CBC3-SHA
    Failed    TLSv1.1  112 bits  SRP-DSS-3DES-EDE-CBC-SHA
    Failed    TLSv1.1  112 bits  SRP-RSA-3DES-EDE-CBC-SHA
    Failed    TLSv1.1  112 bits  SRP-3DES-EDE-CBC-SHA
    Failed    TLSv1.1  112 bits  EDH-RSA-DES-CBC3-SHA
    Failed    TLSv1.1  112 bits  EDH-DSS-DES-CBC3-SHA
    Failed    TLSv1.1  112 bits  AECDH-DES-CBC3-SHA
    Failed    TLSv1.1  112 bits  ADH-DES-CBC3-SHA
    Failed    TLSv1.1  112 bits  ECDH-RSA-DES-CBC3-SHA
    Failed    TLSv1.1  112 bits  ECDH-ECDSA-DES-CBC3-SHA
    Failed    TLSv1.1  112 bits  DES-CBC3-SHA
    Failed    TLSv1.1  112 bits  PSK-3DES-EDE-CBC-SHA
    Failed    TLSv1.1  56 bits   EDH-RSA-DES-CBC-SHA
    Failed    TLSv1.1  56 bits   EDH-DSS-DES-CBC-SHA
    Failed    TLSv1.1  56 bits   ADH-DES-CBC-SHA
    Failed    TLSv1.1  56 bits   DES-CBC-SHA
    Failed    TLSv1.1  40 bits   EXP-EDH-RSA-DES-CBC-SHA
    Failed    TLSv1.1  40 bits   EXP-EDH-DSS-DES-CBC-SHA
    Failed    TLSv1.1  40 bits   EXP-ADH-DES-CBC-SHA
    Failed    TLSv1.1  40 bits   EXP-DES-CBC-SHA
    Failed    TLSv1.1  40 bits   EXP-RC2-CBC-MD5
    Failed    TLSv1.1  40 bits   EXP-ADH-RC4-MD5
    Failed    TLSv1.1  40 bits   EXP-RC4-MD5
    Failed    TLSv1.1  0 bits    ECDHE-RSA-NULL-SHA
    Failed    TLSv1.1  0 bits    ECDHE-ECDSA-NULL-SHA
    Failed    TLSv1.1  0 bits    AECDH-NULL-SHA
    Failed    TLSv1.1  0 bits    ECDH-RSA-NULL-SHA
    Failed    TLSv1.1  0 bits    ECDH-ECDSA-NULL-SHA
    Failed    TLSv1.1  0 bits    NULL-SHA256
    Failed    TLSv1.1  0 bits    NULL-SHA
    Failed    TLSv1.1  0 bits    NULL-MD5
    Failed    TLSv1.2  256 bits  ECDHE-RSA-AES256-GCM-SHA384
    Failed    TLSv1.2  256 bits  ECDHE-ECDSA-AES256-GCM-SHA384
    Failed    TLSv1.2  256 bits  ECDHE-RSA-AES256-SHA384
    Failed    TLSv1.2  256 bits  ECDHE-ECDSA-AES256-SHA384
    Failed    TLSv1.2  256 bits  ECDHE-RSA-AES256-SHA
    Failed    TLSv1.2  256 bits  ECDHE-ECDSA-AES256-SHA
    Failed    TLSv1.2  256 bits  SRP-DSS-AES-256-CBC-SHA
    Failed    TLSv1.2  256 bits  SRP-RSA-AES-256-CBC-SHA
    Failed    TLSv1.2  256 bits  SRP-AES-256-CBC-SHA
    Failed    TLSv1.2  256 bits  DHE-DSS-AES256-GCM-SHA384
    Failed    TLSv1.2  256 bits  DHE-RSA-AES256-GCM-SHA384
    Failed    TLSv1.2  256 bits  DHE-RSA-AES256-SHA256
    Failed    TLSv1.2  256 bits  DHE-DSS-AES256-SHA256
    Failed    TLSv1.2  256 bits  DHE-RSA-AES256-SHA
    Failed    TLSv1.2  256 bits  DHE-DSS-AES256-SHA
    Failed    TLSv1.2  256 bits  DHE-RSA-CAMELLIA256-SHA
    Failed    TLSv1.2  256 bits  DHE-DSS-CAMELLIA256-SHA
    Failed    TLSv1.2  256 bits  AECDH-AES256-SHA
    Failed    TLSv1.2  256 bits  ADH-AES256-GCM-SHA384
    Failed    TLSv1.2  256 bits  ADH-AES256-SHA256
    Failed    TLSv1.2  256 bits  ADH-AES256-SHA
    Failed    TLSv1.2  256 bits  ADH-CAMELLIA256-SHA
    Failed    TLSv1.2  256 bits  ECDH-RSA-AES256-GCM-SHA384
    Failed    TLSv1.2  256 bits  ECDH-ECDSA-AES256-GCM-SHA384
    Failed    TLSv1.2  256 bits  ECDH-RSA-AES256-SHA384
    Failed    TLSv1.2  256 bits  ECDH-ECDSA-AES256-SHA384
    Failed    TLSv1.2  256 bits  ECDH-RSA-AES256-SHA
    Failed    TLSv1.2  256 bits  ECDH-ECDSA-AES256-SHA
    Failed    TLSv1.2  256 bits  AES256-GCM-SHA384
    Failed    TLSv1.2  256 bits  AES256-SHA256
    Failed    TLSv1.2  256 bits  AES256-SHA
    Failed    TLSv1.2  256 bits  CAMELLIA256-SHA
    Failed    TLSv1.2  256 bits  PSK-AES256-CBC-SHA
    Failed    TLSv1.2  128 bits  ECDHE-RSA-AES128-GCM-SHA256
    Failed    TLSv1.2  128 bits  ECDHE-ECDSA-AES128-GCM-SHA256
    Failed    TLSv1.2  128 bits  ECDHE-RSA-AES128-SHA256
    Failed    TLSv1.2  128 bits  ECDHE-ECDSA-AES128-SHA256
    Failed    TLSv1.2  128 bits  ECDHE-RSA-AES128-SHA
    Failed    TLSv1.2  128 bits  ECDHE-ECDSA-AES128-SHA
    Failed    TLSv1.2  128 bits  SRP-DSS-AES-128-CBC-SHA
    Failed    TLSv1.2  128 bits  SRP-RSA-AES-128-CBC-SHA
    Failed    TLSv1.2  128 bits  SRP-AES-128-CBC-SHA
    Failed    TLSv1.2  128 bits  DHE-DSS-AES128-GCM-SHA256
    Failed    TLSv1.2  128 bits  DHE-RSA-AES128-GCM-SHA256
    Failed    TLSv1.2  128 bits  DHE-RSA-AES128-SHA256
    Failed    TLSv1.2  128 bits  DHE-DSS-AES128-SHA256
    Failed    TLSv1.2  128 bits  DHE-RSA-AES128-SHA
    Failed    TLSv1.2  128 bits  DHE-DSS-AES128-SHA
    Failed    TLSv1.2  128 bits  DHE-RSA-SEED-SHA
    Failed    TLSv1.2  128 bits  DHE-DSS-SEED-SHA
    Failed    TLSv1.2  128 bits  DHE-RSA-CAMELLIA128-SHA
    Failed    TLSv1.2  128 bits  DHE-DSS-CAMELLIA128-SHA
    Failed    TLSv1.2  128 bits  AECDH-AES128-SHA
    Failed    TLSv1.2  128 bits  ADH-AES128-GCM-SHA256
    Failed    TLSv1.2  128 bits  ADH-AES128-SHA256
    Failed    TLSv1.2  128 bits  ADH-AES128-SHA
    Failed    TLSv1.2  128 bits  ADH-SEED-SHA
    Failed    TLSv1.2  128 bits  ADH-CAMELLIA128-SHA
    Failed    TLSv1.2  128 bits  ECDH-RSA-AES128-GCM-SHA256
    Failed    TLSv1.2  128 bits  ECDH-ECDSA-AES128-GCM-SHA256
    Failed    TLSv1.2  128 bits  ECDH-RSA-AES128-SHA256
    Failed    TLSv1.2  128 bits  ECDH-ECDSA-AES128-SHA256
    Failed    TLSv1.2  128 bits  ECDH-RSA-AES128-SHA
    Failed    TLSv1.2  128 bits  ECDH-ECDSA-AES128-SHA
    Failed    TLSv1.2  128 bits  AES128-GCM-SHA256
    Failed    TLSv1.2  128 bits  AES128-SHA256
    Failed    TLSv1.2  128 bits  AES128-SHA
    Failed    TLSv1.2  128 bits  SEED-SHA
    Failed    TLSv1.2  128 bits  CAMELLIA128-SHA
    Failed    TLSv1.2  128 bits  IDEA-CBC-SHA
    Failed    TLSv1.2  128 bits  PSK-AES128-CBC-SHA
    Failed    TLSv1.2  128 bits  ECDHE-RSA-RC4-SHA
    Failed    TLSv1.2  128 bits  ECDHE-ECDSA-RC4-SHA
    Failed    TLSv1.2  128 bits  AECDH-RC4-SHA
    Failed    TLSv1.2  128 bits  ADH-RC4-MD5
    Failed    TLSv1.2  128 bits  ECDH-RSA-RC4-SHA
    Failed    TLSv1.2  128 bits  ECDH-ECDSA-RC4-SHA
    Failed    TLSv1.2  128 bits  RC4-SHA
    Failed    TLSv1.2  128 bits  RC4-MD5
    Failed    TLSv1.2  128 bits  PSK-RC4-SHA
    Failed    TLSv1.2  112 bits  ECDHE-RSA-DES-CBC3-SHA
    Failed    TLSv1.2  112 bits  ECDHE-ECDSA-DES-CBC3-SHA
    Failed    TLSv1.2  112 bits  SRP-DSS-3DES-EDE-CBC-SHA
    Failed    TLSv1.2  112 bits  SRP-RSA-3DES-EDE-CBC-SHA
    Failed    TLSv1.2  112 bits  SRP-3DES-EDE-CBC-SHA
    Failed    TLSv1.2  112 bits  EDH-RSA-DES-CBC3-SHA
    Failed    TLSv1.2  112 bits  EDH-DSS-DES-CBC3-SHA
    Failed    TLSv1.2  112 bits  AECDH-DES-CBC3-SHA
    Failed    TLSv1.2  112 bits  ADH-DES-CBC3-SHA
    Failed    TLSv1.2  112 bits  ECDH-RSA-DES-CBC3-SHA
    Failed    TLSv1.2  112 bits  ECDH-ECDSA-DES-CBC3-SHA
    Failed    TLSv1.2  112 bits  DES-CBC3-SHA
    Failed    TLSv1.2  112 bits  PSK-3DES-EDE-CBC-SHA
    Failed    TLSv1.2  56 bits   EDH-RSA-DES-CBC-SHA
    Failed    TLSv1.2  56 bits   EDH-DSS-DES-CBC-SHA
    Failed    TLSv1.2  56 bits   ADH-DES-CBC-SHA
    Failed    TLSv1.2  56 bits   DES-CBC-SHA
    Failed    TLSv1.2  40 bits   EXP-EDH-RSA-DES-CBC-SHA
    Failed    TLSv1.2  40 bits   EXP-EDH-DSS-DES-CBC-SHA
    Failed    TLSv1.2  40 bits   EXP-ADH-DES-CBC-SHA
    Failed    TLSv1.2  40 bits   EXP-DES-CBC-SHA
    Failed    TLSv1.2  40 bits   EXP-RC2-CBC-MD5
    Failed    TLSv1.2  40 bits   EXP-ADH-RC4-MD5
    Failed    TLSv1.2  40 bits   EXP-RC4-MD5
    Failed    TLSv1.2  0 bits    ECDHE-RSA-NULL-SHA
    Failed    TLSv1.2  0 bits    ECDHE-ECDSA-NULL-SHA
    Failed    TLSv1.2  0 bits    AECDH-NULL-SHA
    Failed    TLSv1.2  0 bits    ECDH-RSA-NULL-SHA
    Failed    TLSv1.2  0 bits    ECDH-ECDSA-NULL-SHA
    Failed    TLSv1.2  0 bits    NULL-SHA256
    Failed    TLSv1.2  0 bits    NULL-SHA
    Failed    TLSv1.2  0 bits    NULL-MD5
  Prefered Server Cipher(s):