Terjemahan disediakan oleh mesin penerjemah. Jika konten terjemahan yang diberikan bertentangan dengan versi bahasa Inggris aslinya, utamakan versi bahasa Inggris.
Protokol dan cipher yang didukung antara pemirsa dan CloudFront
Jika Anda memerlukan HTTPS antara pemirsa dan CloudFront distribusi Anda, Anda harus memilih kebijakan keamanan, yang menentukan pengaturan berikut:
-
Protokol SSL/TLS minimum yang CloudFront digunakan untuk berkomunikasi dengan pemirsa.
-
Cipher yang CloudFront dapat digunakan untuk mengenkripsi komunikasi dengan pemirsa.
Untuk memilih kebijakan keamanan, tentukan nilai yang berlaku untuk Kebijakan keamanan (versi SSL/TLS minimum). Tabel berikut mencantumkan protokol dan cipher yang CloudFront dapat digunakan untuk setiap kebijakan keamanan.
Penampil harus mendukung setidaknya satu dari cipher yang didukung untuk membuat koneksi HTTPS dengan. CloudFront CloudFront memilih cipher dalam urutan yang terdaftar dari antara cipher yang didukung pemirsa. Lihat juga Nama cipher OpenSSL, s2n, dan RFC.
| Kebijakan keamanan | |||||||
|---|---|---|---|---|---|---|---|
| SSLv3 | TLSv1 | TLSv1_2016 | TLSv1.1_2016 | TLSv1.2_2018 | TLSv1.2_2019 | TLSv1.2_2021 | |
| Protokol SSL/TLS yang didukung | |||||||
| TLSv1.3 | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ |
| TLSv1.2 | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ |
| TLSv1.1 | ♦ | ♦ | ♦ | ♦ | |||
| TLSv1 | ♦ | ♦ | ♦ | ||||
| SSLv3 | ♦ | ||||||
| Didukung TLSv1 .3 cipher | |||||||
| TLS_AES_128_GCM_ SHA256 | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ |
| TLS_AES_256_GCM_ SHA384 | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ |
| TLS_ 0_ 05_ CHACHA2 POLY13 SHA256 | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ |
| Cipher ECDSA yang didukung | |||||||
| ECDHE-ECDSA- -GCM- AES128 SHA256 | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ |
| ECDHE-ECDSA- - AES128 SHA256 | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ | |
| ECDHE-ECDSA- -SHA AES128 | ♦ | ♦ | ♦ | ♦ | |||
| ECDHE-ECDSA- -GCM- AES256 SHA384 | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ |
| ECDHE-ECDSA- 0- 05 CHACHA2 POLY13 | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ |
| ECDHE-ECDSA- - AES256 SHA384 | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ | |
| ECDHE-ECDSA- -SHA AES256 | ♦ | ♦ | ♦ | ♦ | |||
| Cipher RSA yang didukung | |||||||
| ECDHE-RSA- -GCM- AES128 SHA256 | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ |
| ECDHE-RSA- - AES128 SHA256 | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ | |
| ECDHE-RSA- -SHA AES128 | ♦ | ♦ | ♦ | ♦ | |||
| ECDHE-RSA- -GCM- AES256 SHA384 | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ |
| ECDHE-RSA- 0- 05 CHACHA2 POLY13 | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ |
| ECDHE-RSA- - AES256 SHA384 | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ | |
| ECDHE-RSA- -SHA AES256 | ♦ | ♦ | ♦ | ♦ | |||
| AES128-GCM- SHA256 | ♦ | ♦ | ♦ | ♦ | ♦ | ||
| AES256-GCM- SHA384 | ♦ | ♦ | ♦ | ♦ | ♦ | ||
| AES128-SHA256 | ♦ | ♦ | ♦ | ♦ | ♦ | ||
| AES256-SHA | ♦ | ♦ | ♦ | ♦ | |||
| AES128-SHA | ♦ | ♦ | ♦ | ♦ | |||
| DES- CBC3 -SHA | ♦ | ♦ | |||||
| RC4-MD5 | ♦ | ||||||
Nama cipher OpenSSL, s2n, dan RFC
OpenSSL dan s2n
Untuk cipher dengan algoritma pertukaran kunci kurva elips, CloudFront mendukung kurva elips berikut:
-
primer256v1
-
X25519
Untuk informasi selengkapnya tentang persyaratan sertifikat CloudFront, lihatPersyaratan untuk menggunakan sertifikat SSL/TLS dengan CloudFront.
| Nama cipher OpenSSL dan s2n | Nama cipher RFC |
|---|---|
| Didukung TLSv1 .3 cipher | |
| TLS_AES_128_GCM_ SHA256 | TLS_AES_128_GCM_ SHA256 |
| TLS_AES_256_GCM_ SHA384 | TLS_AES_256_GCM_ SHA384 |
| TLS_ 0_ 05_ CHACHA2 POLY13 SHA256 | TLS_ 0_ 05_ CHACHA2 POLY13 SHA256 |
| Cipher ECDSA yang didukung | |
| ECDHE-ECDSA- -GCM- AES128 SHA256 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_ SHA256 |
| ECDHE-ECDSA- - AES128 SHA256 | TLS_ECDHE_ECDSA_DENGAN_AES_128_CBC_ SHA256 |
| ECDHE-ECDSA- -SHA AES128 | TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA |
| ECDHE-ECDSA- -GCM- AES256 SHA384 | TLS_ECDHE_ECDSA_WITH_AES_256_GCM_ SHA384 |
| ECDHE-ECDSA- 0- 05 CHACHA2 POLY13 | TLS_ECDHE_ECDSA_DENGAN_ 0_ 05_ CHACHA2 POLY13 SHA256 |
| ECDHE-ECDSA- - AES256 SHA384 | TLS_ECDHE_ECDSA_DENGAN_AES_256_CBC_ SHA384 |
| ECDHE-ECDSA- -SHA AES256 | TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA |
| Cipher RSA yang didukung | |
| ECDHE-RSA- -GCM- AES128 SHA256 | TLS_ECDHE_RSA_WITH_AES_128_GCM_ SHA256 |
| ECDHE-RSA- - AES128 SHA256 | TLS_ECDHE_RSA_WITH_AES_128_CBC_ SHA256 |
| ECDHE-RSA- -SHA AES128 | TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA |
| ECDHE-RSA- -GCM- AES256 SHA384 | TLS_ECDHE_RSA_WITH_AES_256_GCM_ SHA384 |
| ECDHE-RSA- 0- 05 CHACHA2 POLY13 | TLS_ECDHE_RSA_DENGAN_ 0_ 05_ CHACHA2 POLY13 SHA256 |
| ECDHE-RSA- - AES256 SHA384 | TLS_ECDHE_RSA_WITH_AES_256_CBC_ SHA384 |
| ECDHE-RSA- -SHA AES256 | TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA |
| AES128-GCM- SHA256 | TLS_RSA_WITH_AES_128_GCM_ SHA256 |
| AES256-GCM- SHA384 | TLS_RSA_WITH_AES_256_GCM_ SHA384 |
| AES128-SHA256 | TLS_RSA_WITH_AES_128_CBC_ SHA256 |
| AES256-SHA | TLS_RSA_WITH_AES_256_CBC_SHA |
| AES128-SHA | TLS_RSA_WITH_AES_128_CBC_SHA |
| DES- CBC3 -SHA | TLS_RSA_WITH_3DES_EDE_CBC_SHA |
| RC4-MD5 | RC4TLS_RSA_DENGAN_ _128_ MD5 |
Skema tanda tangan yang didukung antara pemirsa dan CloudFront
CloudFront mendukung skema tanda tangan berikut untuk koneksi antara pemirsa danCloudFront.
| Kebijakan keamanan | |||||||
|---|---|---|---|---|---|---|---|
| Skema tanda tangan | SSLv3 | TLSv1 | TLSv1_2016 | TLSv1.1_2016 | TLSv1.2_2018 | TLSv1.2_2019 | dan TLSv1 .2_2021 |
| TLS_SIGNATURE_SCHEME_RSA_PSS_PSS_ SHA256 | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ |
| TLS_SIGNATURE_SCHEME_RSA_PSS_PSS_ SHA384 | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ |
| TLS_SIGNATURE_SCHEME_RSA_PSS_PSS_ SHA512 | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ |
| TLS_SIGNATURE_SCHEME_RSA_PSS_RSAE_ SHA256 | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ |
| TLS_SIGNATURE_SCHEME_RSA_PSS_RSAE_ SHA384 | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ |
| TLS_SIGNATURE_SCHEME_RSA_PSS_RSAE_ SHA512 | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ |
| PKCS1TLS_SIGNATURE_SCHEME_RSA_ _ SHA256 | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ |
| PKCS1TLS_SIGNATURE_SCHEME_RSA_ _ SHA384 | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ |
| PKCS1TLS_SIGNATURE_SCHEME_RSA_ _ SHA512 | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ |
| PKCS1TLS_SIGNATURE_SCHEME_RSA_ _ SHA224 | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ |
| TLS_SIGNATURE_SCHEME_ECDSA_ SHA256 | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ |
| TLS_SIGNATURE_SCHEME_ECDSA_ SHA384 | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ |
| TLS_SIGNATURE_SCHEME_ECDSA_ SHA512 | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ |
| TLS_SIGNATURE_SCHEME_ECDSA_ SHA224 | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ |
| TLS_SIGNATURE_SCHEME_ECDSA_ R1_ SECP256 SHA256 | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ |
| TLS_SIGNATURE_SCHEME_ECDSA_ R1_ SECP384 SHA384 | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ | ♦ |
| PKCS1TLS_SIGNATURE_SCHEME_RSA_ _ SHA1 | ♦ | ♦ | ♦ | ♦ | |||
| TLS_SIGNATURE_SCHEME_ECDSA_ SHA1 | ♦ | ♦ | ♦ | ♦ | |||
