See Also: SSLEngine Members
The abstract implementation of secure communications using SSL, TLS, or other protocols. It includes the setup, handshake, and encrypt/decrypt functionality needed to create a secure connection.
SSLEngine instances obtained from default Javax.Net.Ssl.SSLContext are configured as follows:
Protocol | Supported (API Levels) | Enabled by default (API Levels) |
---|---|---|
SSLv3 | 1+ | 1+ |
TLSv1 | 1+ | 1+ |
TLSv1.1 | 20+ | 20+ |
TLSv1.2 | 20+ | 20+ |
Cipher suite | Supported (API Levels) | Enabled by default (API Levels) |
---|---|---|
SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA | 9+ | 9-19 |
SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA | 9+ | 9-19 |
SSL_DHE_DSS_WITH_DES_CBC_SHA | 9+ | 9-19 |
SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA | 9+ | 9-19 |
SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA | 9+ | 9-19 |
SSL_DHE_RSA_WITH_DES_CBC_SHA | 9+ | 9-19 |
SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA | 9+ | |
SSL_DH_anon_EXPORT_WITH_RC4_40_MD5 | 9+ | |
SSL_DH_anon_WITH_3DES_EDE_CBC_SHA | 9+ | |
SSL_DH_anon_WITH_DES_CBC_SHA | 9+ | |
SSL_DH_anon_WITH_RC4_128_MD5 | 9+ | |
SSL_RSA_EXPORT_WITH_DES40_CBC_SHA | 9+ | 9-19 |
SSL_RSA_EXPORT_WITH_RC4_40_MD5 | 9+ | 9-19 |
SSL_RSA_WITH_3DES_EDE_CBC_SHA | 9+ | 9-19 |
SSL_RSA_WITH_DES_CBC_SHA | 9+ | 9-19 |
SSL_RSA_WITH_NULL_MD5 | 9+ | |
SSL_RSA_WITH_NULL_SHA | 9+ | |
SSL_RSA_WITH_RC4_128_MD5 | 9+ | 9-19 |
SSL_RSA_WITH_RC4_128_SHA | 9+ | 9+ |
TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA | 1-8 | 1-8 |
TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA | 1-8 | 1-8 |
TLS_DHE_DSS_WITH_AES_128_CBC_SHA | 9+ | 9+ |
TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 | 20+ | |
TLS_DHE_DSS_WITH_AES_128_GCM_SHA256 | 20+ | |
TLS_DHE_DSS_WITH_AES_256_CBC_SHA | 9+ | 20+ |
TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 | 20+ | |
TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 | 20+ | |
TLS_DHE_DSS_WITH_DES_CBC_SHA | 1-8 | 1-8 |
TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA | 1-8 | 1-8 |
TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA | 1-8 | 1-8 |
TLS_DHE_RSA_WITH_AES_128_CBC_SHA | 9+ | 9+ |
TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 | 20+ | |
TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 | 20+ | 20+ |
TLS_DHE_RSA_WITH_AES_256_CBC_SHA | 9+ | 20+ |
TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 | 20+ | |
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 | 20+ | 20+ |
TLS_DHE_RSA_WITH_DES_CBC_SHA | 1-8 | 1-8 |
TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA | 1-8 | |
TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA | 1-8 | |
TLS_DH_DSS_WITH_DES_CBC_SHA | 1-8 | |
TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA | 1-8 | |
TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA | 1-8 | |
TLS_DH_RSA_WITH_DES_CBC_SHA | 1-8 | |
TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA | 1-8 | |
TLS_DH_anon_WITH_3DES_EDE_CBC_SHA | 1-8 | |
TLS_DH_anon_WITH_AES_128_CBC_SHA | 9+ | |
TLS_DH_anon_WITH_AES_128_CBC_SHA256 | 20+ | |
TLS_DH_anon_WITH_AES_128_GCM_SHA256 | 20+ | |
TLS_DH_anon_WITH_AES_256_CBC_SHA | 9+ | |
TLS_DH_anon_WITH_AES_256_CBC_SHA256 | 20+ | |
TLS_DH_anon_WITH_AES_256_GCM_SHA384 | 20+ | |
TLS_DH_anon_WITH_DES_CBC_SHA | 1-8 | |
TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA | 20+ | |
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA | 20+ | 20+ |
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 | 20+ | |
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 | 20+ | 20+ |
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA | 20+ | 20+ |
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 | 20+ | |
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 | 20+ | 20+ |
TLS_ECDHE_ECDSA_WITH_NULL_SHA | 20+ | |
TLS_ECDHE_ECDSA_WITH_RC4_128_SHA | 20+ | 20+ |
TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA | 20+ | |
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA | 20+ | 20+ |
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 | 20+ | |
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 | 20+ | 20+ |
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA | 20+ | 20+ |
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 | 20+ | |
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 | 20+ | 20+ |
TLS_ECDHE_RSA_WITH_NULL_SHA | 20+ | |
TLS_ECDHE_RSA_WITH_RC4_128_SHA | 20+ | 20+ |
TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA | 20+ | |
TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA | 20+ | |
TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256 | 20+ | |
TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256 | 20+ | |
TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA | 20+ | |
TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 | 20+ | |
TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384 | 20+ | |
TLS_ECDH_ECDSA_WITH_NULL_SHA | 20+ | |
TLS_ECDH_ECDSA_WITH_RC4_128_SHA | 20+ | |
TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA | 20+ | |
TLS_ECDH_RSA_WITH_AES_128_CBC_SHA | 20+ | |
TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256 | 20+ | |
TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256 | 20+ | |
TLS_ECDH_RSA_WITH_AES_256_CBC_SHA | 20+ | |
TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 | 20+ | |
TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384 | 20+ | |
TLS_ECDH_RSA_WITH_NULL_SHA | 20+ | |
TLS_ECDH_RSA_WITH_RC4_128_SHA | 20+ | |
TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA | 20+ | |
TLS_ECDH_anon_WITH_AES_128_CBC_SHA | 20+ | |
TLS_ECDH_anon_WITH_AES_256_CBC_SHA | 20+ | |
TLS_ECDH_anon_WITH_NULL_SHA | 20+ | |
TLS_ECDH_anon_WITH_RC4_128_SHA | 20+ | |
TLS_EMPTY_RENEGOTIATION_INFO_SCSV | 20+ | 20+ |
TLS_FALLBACK_SCSV | 21+ | |
TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA | 21+ | 21+ |
TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA | 21+ | 21+ |
TLS_NULL_WITH_NULL_NULL | 1-8 | |
TLS_PSK_WITH_3DES_EDE_CBC_SHA | 21+ | |
TLS_PSK_WITH_AES_128_CBC_SHA | 21+ | 21+ |
TLS_PSK_WITH_AES_256_CBC_SHA | 21+ | 21+ |
TLS_PSK_WITH_RC4_128_SHA | 21+ | |
TLS_RSA_EXPORT_WITH_DES40_CBC_SHA | 1-8 | 1-8 |
TLS_RSA_WITH_3DES_EDE_CBC_SHA | 1-8 | 1-8 |
TLS_RSA_WITH_AES_128_CBC_SHA | 9+ | 9+ |
TLS_RSA_WITH_AES_128_CBC_SHA256 | 20+ | |
TLS_RSA_WITH_AES_128_GCM_SHA256 | 20+ | 20+ |
TLS_RSA_WITH_AES_256_CBC_SHA | 9+ | 20+ |
TLS_RSA_WITH_AES_256_CBC_SHA256 | 20+ | |
TLS_RSA_WITH_AES_256_GCM_SHA384 | 20+ | 20+ |
TLS_RSA_WITH_DES_CBC_SHA | 1-8 | 1-8 |
TLS_RSA_WITH_NULL_MD5 | 1-8 | |
TLS_RSA_WITH_NULL_SHA | 1-8 | |
TLS_RSA_WITH_NULL_SHA256 | 20+ |
NOTE: PSK cipher suites are enabled by default only if the SSLContext through which the engine was created has been initialized with a PSKKeyManager.