operator-controller/internal/shared/util/tlsprofiles/mozilla_data.json at d3e0d27c16d75a98a33e41b5d45403074d4cc64b · operator-framework/operator-controller · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
{
    "version": 6.0,
    "href": "https://ssl-config.mozilla.org/guidelines/6.0.json",
    "configurations": {
        "modern": {
            "certificate_curves": ["prime256v1", "secp384r1"],
            "certificate_signatures": ["ecdsa-with-SHA256", "ecdsa-with-SHA384", "ecdsa-with-SHA512"],
            "certificate_types": ["ecdsa"],
            "ciphers": {
                "iana": [],
                "openssl": []
            },
            "ciphersuites": [
                "TLS_AES_128_GCM_SHA256",
                "TLS_AES_256_GCM_SHA384",
                "TLS_CHACHA20_POLY1305_SHA256"
            ],
            "dh_param_size": null,
            "ecdh_param_size": 256,
            "hsts_min_age": 63072000,
            "maximum_certificate_lifespan": 90,
            "ocsp_staple": true,
            "oldest_clients": ["Firefox 63", "Android 10.0", "Chrome 70", "Edge 75", "Java 11", "OpenSSL 1.1.1", "Opera 57", "Safari 12.1"],
            "recommended_certificate_lifespan": 90,
            "rsa_key_size": null,
            "server_preferred_order": false,
            "tls_curves": ["X25519MLKEM768", "X25519", "prime256v1", "secp384r1"],
            "tls_versions": ["TLSv1.3"]
        },
        "intermediate": {
            "certificate_curves": ["prime256v1", "secp384r1"],
            "certificate_signatures": ["sha256WithRSAEncryption", "ecdsa-with-SHA256", "ecdsa-with-SHA384", "ecdsa-with-SHA512"],
            "certificate_types": ["ecdsa", "rsa"],
            "ciphers": {
                "iana": [
                    "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
                    "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
                    "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
                    "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
                    "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256",
                    "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256"
                ],
                "openssl": [
                    "ECDHE-ECDSA-AES128-GCM-SHA256",
                    "ECDHE-RSA-AES128-GCM-SHA256",
                    "ECDHE-ECDSA-AES256-GCM-SHA384",
                    "ECDHE-RSA-AES256-GCM-SHA384",
                    "ECDHE-ECDSA-CHACHA20-POLY1305",
                    "ECDHE-RSA-CHACHA20-POLY1305"
                ]
            },
            "ciphersuites": [
                "TLS_AES_128_GCM_SHA256",
                "TLS_AES_256_GCM_SHA384",
                "TLS_CHACHA20_POLY1305_SHA256"
            ],
            "dh_param_size": 2048,
            "ecdh_param_size": 256,
            "hsts_min_age": 63072000,
            "maximum_certificate_lifespan": 366,
            "ocsp_staple": true,
            "oldest_clients": ["Firefox 31.3.0", "Android 4.4.2", "Chrome 49", "Edge 15 on Windows 10", "IE 11 on Windows 10", "Java 8u161", "OpenSSL 1.0.1l", "Opera 20", "Safari 9"],
            "recommended_certificate_lifespan": 90,
            "rsa_key_size": 2048,
            "server_preferred_order": false,
            "tls_curves": ["X25519MLKEM768", "X25519", "prime256v1", "secp384r1"],
            "tls_versions": ["TLSv1.2", "TLSv1.3"]
        }
    }
}