{"sprite": "arclab-arc-working", "role": "arc-working", "title": "ARC #1: working (Wavetronix Arc certificate)", "host": "arclab-arc-working-b2rc4.sprites.app", "url": "https://arclab-arc-working-b2rc4.sprites.app", "uptime_s": 2541, "config": {"profile": "arc", "kex": "rsa-only", "custom": {"cn": "Wavetronix Custom", "key_type": "rsa", "key_usage": ["digitalSignature", "keyEncipherment"], "ku_critical": true}}, "config_version": 1, "config_error": null, "kex": {"id": "rsa-only", "title": "RSA key transport only (today's ARC firmware)", "blurb": "The ARC only knows the old way: the phone encrypts the session secret with the ARC's certificate key. The certificate must therefore allow Key Encipherment.", "max_tls": "1.2", "cipher_lists": {"443": [{"id": "0x002F", "name": "TLS_RSA_WITH_AES_128_CBC_SHA", "kex": "rsa"}, {"id": "0x009D", "name": "TLS_RSA_WITH_AES_256_GCM_SHA384", "kex": "rsa"}, {"id": "0x0035", "name": "TLS_RSA_WITH_AES_256_CBC_SHA", "kex": "rsa"}, {"id": "0x009C", "name": "TLS_RSA_WITH_AES_128_GCM_SHA256", "kex": "rsa"}], "10443": [{"id": "0x009D", "name": "TLS_RSA_WITH_AES_256_GCM_SHA384", "kex": "rsa"}, {"id": "0x002F", "name": "TLS_RSA_WITH_AES_128_CBC_SHA", "kex": "rsa"}, {"id": "0x009C", "name": "TLS_RSA_WITH_AES_128_GCM_SHA256", "kex": "rsa"}, {"id": "0x0035", "name": "TLS_RSA_WITH_AES_256_CBC_SHA", "kex": "rsa"}]}}, "cert": {"subject": "Wavetronix Arc", "subject_org": "Wavetronix", "issuer": "Wavetronix Lab Root CA", "issuer_org": "Wavetronix Lab", "publicly_trusted": false, "serial": "6af14c75dae3c4ffba09a03f13628242d25c0c8f", "not_before": "2026-10-11T05:15:51+00:00", "not_after": "2029-01-14T05:15:51+00:00", "key_type": "RSA", "key_bits": 2048, "key_usage": null, "key_usage_critical": null, "key_usage_friendly": null, "extended_key_usage": ["serverAuth", "clientAuth"], "sans": ["arclab-arc-working-b2rc4.sprites.app", "arclab-arc-working", "localhost", "127.0.0.1"], "sha256": "1b1a087eec9e014f48fd4e6c45ccb9a4fdd3cd08ace716e92a193be7a51d4691", "may_encrypt_secret": true, "may_sign": true}, "profiles": {"arc": {"title": "Wavetronix Arc (working ARC)", "short": "Wavetronix Arc", "blurb": "The certificate found on ARC devices that work with the app. It has NO Key Usage extension, so nothing restricts how its key may be used.", "available": true, "cert": {"subject": "Wavetronix Arc", "subject_org": "Wavetronix", "issuer": "Wavetronix Lab Root CA", "issuer_org": "Wavetronix Lab", "publicly_trusted": false, "serial": "6af14c75dae3c4ffba09a03f13628242d25c0c8f", "not_before": "2026-10-11T05:15:51+00:00", "not_after": "2029-01-14T05:15:51+00:00", "key_type": "RSA", "key_bits": 2048, "key_usage": null, "key_usage_critical": null, "key_usage_friendly": null, "extended_key_usage": ["serverAuth", "clientAuth"], "sans": ["arclab-arc-working-b2rc4.sprites.app", "arclab-arc-working", "localhost", "127.0.0.1"], "sha256": "1b1a087eec9e014f48fd4e6c45ccb9a4fdd3cd08ace716e92a193be7a51d4691", "may_encrypt_secret": true, "may_sign": true}}, "device": {"title": "Wavetronix Device (failing ARC)", "short": "Wavetronix Device", "blurb": "The certificate found on ARC devices that fail. Its Key Usage extension allows Digital Signature and Content Commitment only, NOT Key Encipherment.", "available": true}, "fixed": {"title": "Wavetronix Device, re-issued with Key Encipherment", "short": "Wavetronix Device (fixed)", "blurb": "Same certificate as the failing one but with Key Encipherment added. This is what public CAs issue for RSA keys.", "available": true}, "le-rsa": {"title": "Let's Encrypt, RSA key (real, publicly trusted)", "short": "Let's Encrypt RSA", "blurb": "A real certificate from Let's Encrypt for this ARC's public hostname, with an RSA key. Public CAs always add Key Encipherment to RSA certificates.", "available": true, "cert": {"subject": "arclab-arc-working-b2rc4.sprites.app", "subject_org": "", "issuer": "YR1", "issuer_org": "Let's Encrypt", "publicly_trusted": true, "serial": "67c5c718ab2fbc9bc923b72c54b0df17ebc", "not_before": "2026-10-12T04:24:09+00:00", "not_after": "2027-01-10T04:24:08+00:00", "key_type": "RSA", "key_bits": 2048, "key_usage": ["digitalSignature", "keyEncipherment"], "key_usage_critical": true, "key_usage_friendly": ["Digital Signature", "Key Encipherment"], "extended_key_usage": ["serverAuth"], "sans": ["arclab-arc-working-b2rc4.sprites.app"], "sha256": "dd60bf44fe87d25b38513b6073c07521bb48e6c8b2bcbf35fe4df9eefef3254b", "may_encrypt_secret": true, "may_sign": true}}, "le-ecdsa": {"title": "Let's Encrypt, ECDSA key (real, publicly trusted)", "short": "Let's Encrypt ECDSA", "blurb": "A real Let's Encrypt certificate with an ECDSA key. ECDSA keys cannot do RSA key transport at all, so an ARC using it MUST support ECDHE.", "available": true, "cert": {"subject": "arclab-arc-working-b2rc4.sprites.app", "subject_org": "", "issuer": "YE1", "issuer_org": "Let's Encrypt", "publicly_trusted": true, "serial": "572811f7d4f4a26d020a4fe30e3e5f5871f", "not_before": "2026-10-12T04:24:14+00:00", "not_after": "2027-01-10T04:24:13+00:00", "key_type": "ECDSA (secp256r1)", "key_bits": 256, "key_usage": ["digitalSignature"], "key_usage_critical": true, "key_usage_friendly": ["Digital Signature"], "extended_key_usage": ["serverAuth"], "sans": ["arclab-arc-working-b2rc4.sprites.app"], "sha256": "87fa59f3643bcad3bc26f8a5849fa6dc85e6855cbb06caeb48455ae76a77f8f7", "may_encrypt_secret": false, "may_sign": true}}, "custom": {"title": "Custom certificate (build your own)", "short": "Custom", "blurb": "Pick the key type and the Key Usage bits yourself and see what happens.", "available": true}}, "kex_modes": {"rsa-only": {"title": "RSA key transport only (today's ARC firmware)", "blurb": "The ARC only knows the old way: the phone encrypts the session secret with the ARC's certificate key. The certificate must therefore allow Key Encipherment."}, "ecdhe": {"title": "ECDHE enabled, TLS 1.2 (RSA key transport kept as fallback)", "blurb": "The ARC prefers ephemeral Diffie-Hellman: the certificate key only signs. Digital Signature is enough, and every session gets forward secrecy."}, "tls13": {"title": "TLS 1.3 (ECDHE for TLS 1.2 clients)", "blurb": "Modern TLS: key transport no longer exists, the certificate key is only ever used to sign."}}, "listeners": [{"port": 443, "service": "HTTPS REST API"}, {"port": 10443, "service": "EMP"}], "counters": {"ok": 24, "failed": 0}, "recent": [{"ts": 1791789304.3712356, "time": "2026-10-12T07:15:04.371+00:00", "port": 10443, "service": "EMP", "peer": "fdf::2:49358", "client_hello": {"legacy_version": "TLS 1.2", "ciphers": [{"id": "0x1301", "name": "TLS_AES_128_GCM_SHA256", "kex": "tls13"}, {"id": "0x1302", "name": "TLS_AES_256_GCM_SHA384", "kex": "tls13"}, {"id": "0x1303", "name": "TLS_CHACHA20_POLY1305_SHA256", "kex": "tls13"}, {"id": "0xC02B", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02F", "name": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02C", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xC030", "name": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xCCA9", "name": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xCCA8", "name": "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xC009", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC013", "name": "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC00A", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC014", "name": "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0x009C", "name": "TLS_RSA_WITH_AES_128_GCM_SHA256", "kex": "rsa"}, {"id": "0x009D", "name": "TLS_RSA_WITH_AES_256_GCM_SHA384", "kex": "rsa"}, {"id": "0x002F", "name": "TLS_RSA_WITH_AES_128_CBC_SHA", "kex": "rsa"}, {"id": "0x0035", "name": "TLS_RSA_WITH_AES_256_CBC_SHA", "kex": "rsa"}], "n_ciphers": 17, "offers_rsa_key_transport": true, "offers_ecdhe": true, "offers_tls13": true, "supported_versions": ["TLS 1.3", "TLS 1.2"], "sni": "arclab-arc-working-b2rc4.sprites.app", "groups": ["x25519", "secp256r1", "secp384r1"], "sigalgs": ["ecdsa_secp256r1_sha256", "rsa_pss_rsae_sha256", "rsa_pkcs1_sha256", "ecdsa_secp384r1_sha384", "rsa_pss_rsae_sha384", "rsa_pkcs1_sha384", "rsa_pss_rsae_sha512", "rsa_pkcs1_sha512", "rsa_pkcs1_sha1"]}, "server": {"profile": "arc", "profile_title": "Wavetronix Arc (working ARC)", "kex": "rsa-only", "kex_title": "RSA key transport only (today's ARC firmware)", "cert_subject": "Wavetronix Arc", "key_type": "RSA", "key_usage": null, "may_encrypt_secret": true, "may_sign": true}, "negotiable": ["TLS_RSA_WITH_AES_256_GCM_SHA384", "TLS_RSA_WITH_AES_128_CBC_SHA", "TLS_RSA_WITH_AES_128_GCM_SHA256", "TLS_RSA_WITH_AES_256_CBC_SHA"], "expected_cipher": "TLS_RSA_WITH_AES_256_GCM_SHA384", "result": "ok", "tls_version": "TLSv1.2", "cipher": "TLS_RSA_WITH_AES_256_GCM_SHA384", "cipher_openssl": "AES256-GCM-SHA384", "cipher_id": "0x009D", "kex": "rsa", "kex_label": "RSA key transport (certificate key encrypts the secret)", "response": "EMP/1.0 READY device=arclab-arc-working tls=TLSv1.2 cipher=TLS_RSA_WITH_AES_256_GCM_SHA384", "app_note": "client closed the connection after the handshake without finishing the exchange (BrokenPipeError: [Errno 32] Broken pipe)", "ms": 13}, {"ts": 1791789304.4372888, "time": "2026-10-12T07:15:04.437+00:00", "port": 443, "service": "HTTPS REST API", "peer": "fdf::2:48150", "client_hello": {"legacy_version": "TLS 1.2", "ciphers": [{"id": "0x1301", "name": "TLS_AES_128_GCM_SHA256", "kex": "tls13"}, {"id": "0x1302", "name": "TLS_AES_256_GCM_SHA384", "kex": "tls13"}, {"id": "0x1303", "name": "TLS_CHACHA20_POLY1305_SHA256", "kex": "tls13"}, {"id": "0xC02B", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02F", "name": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02C", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xC030", "name": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xCCA9", "name": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xCCA8", "name": "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xC009", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC013", "name": "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC00A", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC014", "name": "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0x009C", "name": "TLS_RSA_WITH_AES_128_GCM_SHA256", "kex": "rsa"}, {"id": "0x009D", "name": "TLS_RSA_WITH_AES_256_GCM_SHA384", "kex": "rsa"}, {"id": "0x002F", "name": "TLS_RSA_WITH_AES_128_CBC_SHA", "kex": "rsa"}, {"id": "0x0035", "name": "TLS_RSA_WITH_AES_256_CBC_SHA", "kex": "rsa"}], "n_ciphers": 17, "offers_rsa_key_transport": true, "offers_ecdhe": true, "offers_tls13": true, "supported_versions": ["TLS 1.3", "TLS 1.2"], "sni": "arclab-arc-working-b2rc4.sprites.app", "groups": ["x25519", "secp256r1", "secp384r1"], "sigalgs": ["ecdsa_secp256r1_sha256", "rsa_pss_rsae_sha256", "rsa_pkcs1_sha256", "ecdsa_secp384r1_sha384", "rsa_pss_rsae_sha384", "rsa_pkcs1_sha384", "rsa_pss_rsae_sha512", "rsa_pkcs1_sha512", "rsa_pkcs1_sha1"]}, "server": {"profile": "arc", "profile_title": "Wavetronix Arc (working ARC)", "kex": "rsa-only", "kex_title": "RSA key transport only (today's ARC firmware)", "cert_subject": "Wavetronix Arc", "key_type": "RSA", "key_usage": null, "may_encrypt_secret": true, "may_sign": true}, "negotiable": ["TLS_RSA_WITH_AES_128_CBC_SHA", "TLS_RSA_WITH_AES_256_GCM_SHA384", "TLS_RSA_WITH_AES_256_CBC_SHA", "TLS_RSA_WITH_AES_128_GCM_SHA256"], "expected_cipher": "TLS_RSA_WITH_AES_128_CBC_SHA", "result": "ok", "tls_version": "TLSv1.2", "cipher": "TLS_RSA_WITH_AES_128_CBC_SHA", "cipher_openssl": "AES128-SHA", "cipher_id": "0x002F", "kex": "rsa", "kex_label": "RSA key transport (certificate key encrypts the secret)", "request": "GET /api/hello HTTP/1.1", "response": "200 OK (468 bytes)", "ms": 11}, {"ts": 1791789304.5566165, "time": "2026-10-12T07:15:04.556+00:00", "port": 10443, "service": "EMP", "peer": "fdf::2:49384", "client_hello": {"legacy_version": "TLS 1.2", "ciphers": [{"id": "0x1301", "name": "TLS_AES_128_GCM_SHA256", "kex": "tls13"}, {"id": "0x1302", "name": "TLS_AES_256_GCM_SHA384", "kex": "tls13"}, {"id": "0x1303", "name": "TLS_CHACHA20_POLY1305_SHA256", "kex": "tls13"}, {"id": "0xC02B", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02F", "name": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02C", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xC030", "name": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xCCA9", "name": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xCCA8", "name": "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xC009", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC013", "name": "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC00A", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC014", "name": "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0x009C", "name": "TLS_RSA_WITH_AES_128_GCM_SHA256", "kex": "rsa"}, {"id": "0x009D", "name": "TLS_RSA_WITH_AES_256_GCM_SHA384", "kex": "rsa"}, {"id": "0x002F", "name": "TLS_RSA_WITH_AES_128_CBC_SHA", "kex": "rsa"}, {"id": "0x0035", "name": "TLS_RSA_WITH_AES_256_CBC_SHA", "kex": "rsa"}], "n_ciphers": 17, "offers_rsa_key_transport": true, "offers_ecdhe": true, "offers_tls13": true, "supported_versions": ["TLS 1.3", "TLS 1.2"], "sni": "arclab-arc-working-b2rc4.sprites.app", "groups": ["x25519", "secp256r1", "secp384r1"], "sigalgs": ["ecdsa_secp256r1_sha256", "rsa_pss_rsae_sha256", "rsa_pkcs1_sha256", "ecdsa_secp384r1_sha384", "rsa_pss_rsae_sha384", "rsa_pkcs1_sha384", "rsa_pss_rsae_sha512", "rsa_pkcs1_sha512", "rsa_pkcs1_sha1"]}, "server": {"profile": "arc", "profile_title": "Wavetronix Arc (working ARC)", "kex": "rsa-only", "kex_title": "RSA key transport only (today's ARC firmware)", "cert_subject": "Wavetronix Arc", "key_type": "RSA", "key_usage": null, "may_encrypt_secret": true, "may_sign": true}, "negotiable": ["TLS_RSA_WITH_AES_256_GCM_SHA384", "TLS_RSA_WITH_AES_128_CBC_SHA", "TLS_RSA_WITH_AES_128_GCM_SHA256", "TLS_RSA_WITH_AES_256_CBC_SHA"], "expected_cipher": "TLS_RSA_WITH_AES_256_GCM_SHA384", "result": "ok", "tls_version": "TLSv1.2", "cipher": "TLS_RSA_WITH_AES_256_GCM_SHA384", "cipher_openssl": "AES256-GCM-SHA384", "cipher_id": "0x009D", "kex": "rsa", "kex_label": "RSA key transport (certificate key encrypts the secret)", "response": "EMP/1.0 READY device=arclab-arc-working tls=TLSv1.2 cipher=TLS_RSA_WITH_AES_256_GCM_SHA384", "app_note": "client closed the connection after the handshake without finishing the exchange (BrokenPipeError: [Errno 32] Broken pipe)", "ms": 13}, {"ts": 1791789304.5595927, "time": "2026-10-12T07:15:04.559+00:00", "port": 443, "service": "HTTPS REST API", "peer": "fdf::2:48160", "client_hello": {"legacy_version": "TLS 1.2", "ciphers": [{"id": "0x1301", "name": "TLS_AES_128_GCM_SHA256", "kex": "tls13"}, {"id": "0x1302", "name": "TLS_AES_256_GCM_SHA384", "kex": "tls13"}, {"id": "0x1303", "name": "TLS_CHACHA20_POLY1305_SHA256", "kex": "tls13"}, {"id": "0xC02B", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02F", "name": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02C", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xC030", "name": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xCCA9", "name": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xCCA8", "name": "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xC009", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC013", "name": "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC00A", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC014", "name": "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0x009C", "name": "TLS_RSA_WITH_AES_128_GCM_SHA256", "kex": "rsa"}, {"id": "0x009D", "name": "TLS_RSA_WITH_AES_256_GCM_SHA384", "kex": "rsa"}, {"id": "0x002F", "name": "TLS_RSA_WITH_AES_128_CBC_SHA", "kex": "rsa"}, {"id": "0x0035", "name": "TLS_RSA_WITH_AES_256_CBC_SHA", "kex": "rsa"}], "n_ciphers": 17, "offers_rsa_key_transport": true, "offers_ecdhe": true, "offers_tls13": true, "supported_versions": ["TLS 1.3", "TLS 1.2"], "sni": "arclab-arc-working-b2rc4.sprites.app", "groups": ["x25519", "secp256r1", "secp384r1"], "sigalgs": ["ecdsa_secp256r1_sha256", "rsa_pss_rsae_sha256", "rsa_pkcs1_sha256", "ecdsa_secp384r1_sha384", "rsa_pss_rsae_sha384", "rsa_pkcs1_sha384", "rsa_pss_rsae_sha512", "rsa_pkcs1_sha512", "rsa_pkcs1_sha1"]}, "server": {"profile": "arc", "profile_title": "Wavetronix Arc (working ARC)", "kex": "rsa-only", "kex_title": "RSA key transport only (today's ARC firmware)", "cert_subject": "Wavetronix Arc", "key_type": "RSA", "key_usage": null, "may_encrypt_secret": true, "may_sign": true}, "negotiable": ["TLS_RSA_WITH_AES_128_CBC_SHA", "TLS_RSA_WITH_AES_256_GCM_SHA384", "TLS_RSA_WITH_AES_256_CBC_SHA", "TLS_RSA_WITH_AES_128_GCM_SHA256"], "expected_cipher": "TLS_RSA_WITH_AES_128_CBC_SHA", "result": "ok", "tls_version": "TLSv1.2", "cipher": "TLS_RSA_WITH_AES_128_CBC_SHA", "cipher_openssl": "AES128-SHA", "cipher_id": "0x002F", "kex": "rsa", "kex_label": "RSA key transport (certificate key encrypts the secret)", "request": "GET /api/hello HTTP/1.1", "response": "200 OK (468 bytes)", "ms": 10}, {"ts": 1791789900.1451428, "time": "2026-10-12T07:25:00.145+00:00", "port": 10443, "service": "EMP", "peer": "fdf::2:53092", "client_hello": {"legacy_version": "TLS 1.2", "ciphers": [{"id": "0x1301", "name": "TLS_AES_128_GCM_SHA256", "kex": "tls13"}, {"id": "0x1302", "name": "TLS_AES_256_GCM_SHA384", "kex": "tls13"}, {"id": "0x1303", "name": "TLS_CHACHA20_POLY1305_SHA256", "kex": "tls13"}, {"id": "0xC02B", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02F", "name": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02C", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xC030", "name": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xCCA9", "name": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xCCA8", "name": "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xC009", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC013", "name": "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC00A", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC014", "name": "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0x009C", "name": "TLS_RSA_WITH_AES_128_GCM_SHA256", "kex": "rsa"}, {"id": "0x009D", "name": "TLS_RSA_WITH_AES_256_GCM_SHA384", "kex": "rsa"}, {"id": "0x002F", "name": "TLS_RSA_WITH_AES_128_CBC_SHA", "kex": "rsa"}, {"id": "0x0035", "name": "TLS_RSA_WITH_AES_256_CBC_SHA", "kex": "rsa"}], "n_ciphers": 17, "offers_rsa_key_transport": true, "offers_ecdhe": true, "offers_tls13": true, "supported_versions": ["TLS 1.3", "TLS 1.2"], "sni": "arclab-arc-working-b2rc4.sprites.app", "groups": ["x25519", "secp256r1", "secp384r1"], "sigalgs": ["ecdsa_secp256r1_sha256", "rsa_pss_rsae_sha256", "rsa_pkcs1_sha256", "ecdsa_secp384r1_sha384", "rsa_pss_rsae_sha384", "rsa_pkcs1_sha384", "rsa_pss_rsae_sha512", "rsa_pkcs1_sha512", "rsa_pkcs1_sha1"]}, "server": {"profile": "arc", "profile_title": "Wavetronix Arc (working ARC)", "kex": "rsa-only", "kex_title": "RSA key transport only (today's ARC firmware)", "cert_subject": "Wavetronix Arc", "key_type": "RSA", "key_usage": null, "may_encrypt_secret": true, "may_sign": true}, "negotiable": ["TLS_RSA_WITH_AES_256_GCM_SHA384", "TLS_RSA_WITH_AES_128_CBC_SHA", "TLS_RSA_WITH_AES_128_GCM_SHA256", "TLS_RSA_WITH_AES_256_CBC_SHA"], "expected_cipher": "TLS_RSA_WITH_AES_256_GCM_SHA384", "result": "ok", "tls_version": "TLSv1.2", "cipher": "TLS_RSA_WITH_AES_256_GCM_SHA384", "cipher_openssl": "AES256-GCM-SHA384", "cipher_id": "0x009D", "kex": "rsa", "kex_label": "RSA key transport (certificate key encrypts the secret)", "response": "EMP/1.0 READY device=arclab-arc-working tls=TLSv1.2 cipher=TLS_RSA_WITH_AES_256_GCM_SHA384", "app_note": "client closed the connection after the handshake without finishing the exchange (BrokenPipeError: [Errno 32] Broken pipe)", "ms": 14}, {"ts": 1791789900.217191, "time": "2026-10-12T07:25:00.217+00:00", "port": 443, "service": "HTTPS REST API", "peer": "fdf::2:32930", "client_hello": {"legacy_version": "TLS 1.2", "ciphers": [{"id": "0x1301", "name": "TLS_AES_128_GCM_SHA256", "kex": "tls13"}, {"id": "0x1302", "name": "TLS_AES_256_GCM_SHA384", "kex": "tls13"}, {"id": "0x1303", "name": "TLS_CHACHA20_POLY1305_SHA256", "kex": "tls13"}, {"id": "0xC02B", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02F", "name": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02C", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xC030", "name": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xCCA9", "name": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xCCA8", "name": "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xC009", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC013", "name": "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC00A", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC014", "name": "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0x009C", "name": "TLS_RSA_WITH_AES_128_GCM_SHA256", "kex": "rsa"}, {"id": "0x009D", "name": "TLS_RSA_WITH_AES_256_GCM_SHA384", "kex": "rsa"}, {"id": "0x002F", "name": "TLS_RSA_WITH_AES_128_CBC_SHA", "kex": "rsa"}, {"id": "0x0035", "name": "TLS_RSA_WITH_AES_256_CBC_SHA", "kex": "rsa"}], "n_ciphers": 17, "offers_rsa_key_transport": true, "offers_ecdhe": true, "offers_tls13": true, "supported_versions": ["TLS 1.3", "TLS 1.2"], "sni": "arclab-arc-working-b2rc4.sprites.app", "groups": ["x25519", "secp256r1", "secp384r1"], "sigalgs": ["ecdsa_secp256r1_sha256", "rsa_pss_rsae_sha256", "rsa_pkcs1_sha256", "ecdsa_secp384r1_sha384", "rsa_pss_rsae_sha384", "rsa_pkcs1_sha384", "rsa_pss_rsae_sha512", "rsa_pkcs1_sha512", "rsa_pkcs1_sha1"]}, "server": {"profile": "arc", "profile_title": "Wavetronix Arc (working ARC)", "kex": "rsa-only", "kex_title": "RSA key transport only (today's ARC firmware)", "cert_subject": "Wavetronix Arc", "key_type": "RSA", "key_usage": null, "may_encrypt_secret": true, "may_sign": true}, "negotiable": ["TLS_RSA_WITH_AES_128_CBC_SHA", "TLS_RSA_WITH_AES_256_GCM_SHA384", "TLS_RSA_WITH_AES_256_CBC_SHA", "TLS_RSA_WITH_AES_128_GCM_SHA256"], "expected_cipher": "TLS_RSA_WITH_AES_128_CBC_SHA", "result": "ok", "tls_version": "TLSv1.2", "cipher": "TLS_RSA_WITH_AES_128_CBC_SHA", "cipher_openssl": "AES128-SHA", "cipher_id": "0x002F", "kex": "rsa", "kex_label": "RSA key transport (certificate key encrypts the secret)", "request": "GET /api/hello HTTP/1.1", "response": "200 OK (468 bytes)", "ms": 12}, {"ts": 1791789900.3417935, "time": "2026-10-12T07:25:00.341+00:00", "port": 10443, "service": "EMP", "peer": "fdf::2:53112", "client_hello": {"legacy_version": "TLS 1.2", "ciphers": [{"id": "0x1301", "name": "TLS_AES_128_GCM_SHA256", "kex": "tls13"}, {"id": "0x1302", "name": "TLS_AES_256_GCM_SHA384", "kex": "tls13"}, {"id": "0x1303", "name": "TLS_CHACHA20_POLY1305_SHA256", "kex": "tls13"}, {"id": "0xC02B", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02F", "name": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02C", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xC030", "name": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xCCA9", "name": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xCCA8", "name": "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xC009", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC013", "name": "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC00A", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC014", "name": "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0x009C", "name": "TLS_RSA_WITH_AES_128_GCM_SHA256", "kex": "rsa"}, {"id": "0x009D", "name": "TLS_RSA_WITH_AES_256_GCM_SHA384", "kex": "rsa"}, {"id": "0x002F", "name": "TLS_RSA_WITH_AES_128_CBC_SHA", "kex": "rsa"}, {"id": "0x0035", "name": "TLS_RSA_WITH_AES_256_CBC_SHA", "kex": "rsa"}], "n_ciphers": 17, "offers_rsa_key_transport": true, "offers_ecdhe": true, "offers_tls13": true, "supported_versions": ["TLS 1.3", "TLS 1.2"], "sni": "arclab-arc-working-b2rc4.sprites.app", "groups": ["x25519", "secp256r1", "secp384r1"], "sigalgs": ["ecdsa_secp256r1_sha256", "rsa_pss_rsae_sha256", "rsa_pkcs1_sha256", "ecdsa_secp384r1_sha384", "rsa_pss_rsae_sha384", "rsa_pkcs1_sha384", "rsa_pss_rsae_sha512", "rsa_pkcs1_sha512", "rsa_pkcs1_sha1"]}, "server": {"profile": "arc", "profile_title": "Wavetronix Arc (working ARC)", "kex": "rsa-only", "kex_title": "RSA key transport only (today's ARC firmware)", "cert_subject": "Wavetronix Arc", "key_type": "RSA", "key_usage": null, "may_encrypt_secret": true, "may_sign": true}, "negotiable": ["TLS_RSA_WITH_AES_256_GCM_SHA384", "TLS_RSA_WITH_AES_128_CBC_SHA", "TLS_RSA_WITH_AES_128_GCM_SHA256", "TLS_RSA_WITH_AES_256_CBC_SHA"], "expected_cipher": "TLS_RSA_WITH_AES_256_GCM_SHA384", "result": "ok", "tls_version": "TLSv1.2", "cipher": "TLS_RSA_WITH_AES_256_GCM_SHA384", "cipher_openssl": "AES256-GCM-SHA384", "cipher_id": "0x009D", "kex": "rsa", "kex_label": "RSA key transport (certificate key encrypts the secret)", "response": "EMP/1.0 READY device=arclab-arc-working tls=TLSv1.2 cipher=TLS_RSA_WITH_AES_256_GCM_SHA384", "app_note": "client closed the connection after the handshake without finishing the exchange (BrokenPipeError: [Errno 32] Broken pipe)", "ms": 13}, {"ts": 1791789900.4143538, "time": "2026-10-12T07:25:00.414+00:00", "port": 443, "service": "HTTPS REST API", "peer": "fdf::2:32958", "client_hello": {"legacy_version": "TLS 1.2", "ciphers": [{"id": "0x1301", "name": "TLS_AES_128_GCM_SHA256", "kex": "tls13"}, {"id": "0x1302", "name": "TLS_AES_256_GCM_SHA384", "kex": "tls13"}, {"id": "0x1303", "name": "TLS_CHACHA20_POLY1305_SHA256", "kex": "tls13"}, {"id": "0xC02B", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02F", "name": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02C", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xC030", "name": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xCCA9", "name": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xCCA8", "name": "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xC009", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC013", "name": "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC00A", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC014", "name": "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0x009C", "name": "TLS_RSA_WITH_AES_128_GCM_SHA256", "kex": "rsa"}, {"id": "0x009D", "name": "TLS_RSA_WITH_AES_256_GCM_SHA384", "kex": "rsa"}, {"id": "0x002F", "name": "TLS_RSA_WITH_AES_128_CBC_SHA", "kex": "rsa"}, {"id": "0x0035", "name": "TLS_RSA_WITH_AES_256_CBC_SHA", "kex": "rsa"}], "n_ciphers": 17, "offers_rsa_key_transport": true, "offers_ecdhe": true, "offers_tls13": true, "supported_versions": ["TLS 1.3", "TLS 1.2"], "sni": "arclab-arc-working-b2rc4.sprites.app", "groups": ["x25519", "secp256r1", "secp384r1"], "sigalgs": ["ecdsa_secp256r1_sha256", "rsa_pss_rsae_sha256", "rsa_pkcs1_sha256", "ecdsa_secp384r1_sha384", "rsa_pss_rsae_sha384", "rsa_pkcs1_sha384", "rsa_pss_rsae_sha512", "rsa_pkcs1_sha512", "rsa_pkcs1_sha1"]}, "server": {"profile": "arc", "profile_title": "Wavetronix Arc (working ARC)", "kex": "rsa-only", "kex_title": "RSA key transport only (today's ARC firmware)", "cert_subject": "Wavetronix Arc", "key_type": "RSA", "key_usage": null, "may_encrypt_secret": true, "may_sign": true}, "negotiable": ["TLS_RSA_WITH_AES_128_CBC_SHA", "TLS_RSA_WITH_AES_256_GCM_SHA384", "TLS_RSA_WITH_AES_256_CBC_SHA", "TLS_RSA_WITH_AES_128_GCM_SHA256"], "expected_cipher": "TLS_RSA_WITH_AES_128_CBC_SHA", "result": "ok", "tls_version": "TLSv1.2", "cipher": "TLS_RSA_WITH_AES_128_CBC_SHA", "cipher_openssl": "AES128-SHA", "cipher_id": "0x002F", "kex": "rsa", "kex_label": "RSA key transport (certificate key encrypts the secret)", "request": "GET /api/hello HTTP/1.1", "response": "200 OK (468 bytes)", "ms": 10}, {"ts": 1791790084.9191043, "time": "2026-10-12T07:28:04.919+00:00", "port": 10443, "service": "EMP", "peer": "fdf::2:33376", "client_hello": {"legacy_version": "TLS 1.2", "ciphers": [{"id": "0x1301", "name": "TLS_AES_128_GCM_SHA256", "kex": "tls13"}, {"id": "0x1302", "name": "TLS_AES_256_GCM_SHA384", "kex": "tls13"}, {"id": "0x1303", "name": "TLS_CHACHA20_POLY1305_SHA256", "kex": "tls13"}, {"id": "0xC02B", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02F", "name": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02C", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xC030", "name": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xCCA9", "name": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xCCA8", "name": "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xC009", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC013", "name": "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC00A", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC014", "name": "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0x009C", "name": "TLS_RSA_WITH_AES_128_GCM_SHA256", "kex": "rsa"}, {"id": "0x009D", "name": "TLS_RSA_WITH_AES_256_GCM_SHA384", "kex": "rsa"}, {"id": "0x002F", "name": "TLS_RSA_WITH_AES_128_CBC_SHA", "kex": "rsa"}, {"id": "0x0035", "name": "TLS_RSA_WITH_AES_256_CBC_SHA", "kex": "rsa"}], "n_ciphers": 17, "offers_rsa_key_transport": true, "offers_ecdhe": true, "offers_tls13": true, "supported_versions": ["TLS 1.3", "TLS 1.2"], "sni": "arclab-arc-working-b2rc4.sprites.app", "groups": ["x25519", "secp256r1", "secp384r1"], "sigalgs": ["ecdsa_secp256r1_sha256", "rsa_pss_rsae_sha256", "rsa_pkcs1_sha256", "ecdsa_secp384r1_sha384", "rsa_pss_rsae_sha384", "rsa_pkcs1_sha384", "rsa_pss_rsae_sha512", "rsa_pkcs1_sha512", "rsa_pkcs1_sha1"]}, "server": {"profile": "arc", "profile_title": "Wavetronix Arc (working ARC)", "kex": "rsa-only", "kex_title": "RSA key transport only (today's ARC firmware)", "cert_subject": "Wavetronix Arc", "key_type": "RSA", "key_usage": null, "may_encrypt_secret": true, "may_sign": true}, "negotiable": ["TLS_RSA_WITH_AES_256_GCM_SHA384", "TLS_RSA_WITH_AES_128_CBC_SHA", "TLS_RSA_WITH_AES_128_GCM_SHA256", "TLS_RSA_WITH_AES_256_CBC_SHA"], "expected_cipher": "TLS_RSA_WITH_AES_256_GCM_SHA384", "result": "ok", "tls_version": "TLSv1.2", "cipher": "TLS_RSA_WITH_AES_256_GCM_SHA384", "cipher_openssl": "AES256-GCM-SHA384", "cipher_id": "0x009D", "kex": "rsa", "kex_label": "RSA key transport (certificate key encrypts the secret)", "response": "EMP/1.0 READY device=arclab-arc-working tls=TLSv1.2 cipher=TLS_RSA_WITH_AES_256_GCM_SHA384", "app_note": "client closed the connection after the handshake without finishing the exchange (BrokenPipeError: [Errno 32] Broken pipe)", "ms": 13}, {"ts": 1791790084.9925237, "time": "2026-10-12T07:28:04.992+00:00", "port": 443, "service": "HTTPS REST API", "peer": "fdf::2:47270", "client_hello": {"legacy_version": "TLS 1.2", "ciphers": [{"id": "0x1301", "name": "TLS_AES_128_GCM_SHA256", "kex": "tls13"}, {"id": "0x1302", "name": "TLS_AES_256_GCM_SHA384", "kex": "tls13"}, {"id": "0x1303", "name": "TLS_CHACHA20_POLY1305_SHA256", "kex": "tls13"}, {"id": "0xC02B", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02F", "name": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02C", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xC030", "name": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xCCA9", "name": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xCCA8", "name": "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xC009", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC013", "name": "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC00A", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC014", "name": "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0x009C", "name": "TLS_RSA_WITH_AES_128_GCM_SHA256", "kex": "rsa"}, {"id": "0x009D", "name": "TLS_RSA_WITH_AES_256_GCM_SHA384", "kex": "rsa"}, {"id": "0x002F", "name": "TLS_RSA_WITH_AES_128_CBC_SHA", "kex": "rsa"}, {"id": "0x0035", "name": "TLS_RSA_WITH_AES_256_CBC_SHA", "kex": "rsa"}], "n_ciphers": 17, "offers_rsa_key_transport": true, "offers_ecdhe": true, "offers_tls13": true, "supported_versions": ["TLS 1.3", "TLS 1.2"], "sni": "arclab-arc-working-b2rc4.sprites.app", "groups": ["x25519", "secp256r1", "secp384r1"], "sigalgs": ["ecdsa_secp256r1_sha256", "rsa_pss_rsae_sha256", "rsa_pkcs1_sha256", "ecdsa_secp384r1_sha384", "rsa_pss_rsae_sha384", "rsa_pkcs1_sha384", "rsa_pss_rsae_sha512", "rsa_pkcs1_sha512", "rsa_pkcs1_sha1"]}, "server": {"profile": "arc", "profile_title": "Wavetronix Arc (working ARC)", "kex": "rsa-only", "kex_title": "RSA key transport only (today's ARC firmware)", "cert_subject": "Wavetronix Arc", "key_type": "RSA", "key_usage": null, "may_encrypt_secret": true, "may_sign": true}, "negotiable": ["TLS_RSA_WITH_AES_128_CBC_SHA", "TLS_RSA_WITH_AES_256_GCM_SHA384", "TLS_RSA_WITH_AES_256_CBC_SHA", "TLS_RSA_WITH_AES_128_GCM_SHA256"], "expected_cipher": "TLS_RSA_WITH_AES_128_CBC_SHA", "result": "ok", "tls_version": "TLSv1.2", "cipher": "TLS_RSA_WITH_AES_128_CBC_SHA", "cipher_openssl": "AES128-SHA", "cipher_id": "0x002F", "kex": "rsa", "kex_label": "RSA key transport (certificate key encrypts the secret)", "request": "GET /api/hello HTTP/1.1", "response": "200 OK (468 bytes)", "ms": 10}, {"ts": 1791790085.03584, "time": "2026-10-12T07:28:05.035+00:00", "port": 10443, "service": "EMP", "peer": "fdf::2:33386", "client_hello": {"legacy_version": "TLS 1.2", "ciphers": [{"id": "0x1301", "name": "TLS_AES_128_GCM_SHA256", "kex": "tls13"}, {"id": "0x1302", "name": "TLS_AES_256_GCM_SHA384", "kex": "tls13"}, {"id": "0x1303", "name": "TLS_CHACHA20_POLY1305_SHA256", "kex": "tls13"}, {"id": "0xC02B", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02F", "name": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02C", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xC030", "name": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xCCA9", "name": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xCCA8", "name": "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xC009", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC013", "name": "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC00A", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC014", "name": "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0x009C", "name": "TLS_RSA_WITH_AES_128_GCM_SHA256", "kex": "rsa"}, {"id": "0x009D", "name": "TLS_RSA_WITH_AES_256_GCM_SHA384", "kex": "rsa"}, {"id": "0x002F", "name": "TLS_RSA_WITH_AES_128_CBC_SHA", "kex": "rsa"}, {"id": "0x0035", "name": "TLS_RSA_WITH_AES_256_CBC_SHA", "kex": "rsa"}], "n_ciphers": 17, "offers_rsa_key_transport": true, "offers_ecdhe": true, "offers_tls13": true, "supported_versions": ["TLS 1.3", "TLS 1.2"], "sni": "arclab-arc-working-b2rc4.sprites.app", "groups": ["x25519", "secp256r1", "secp384r1"], "sigalgs": ["ecdsa_secp256r1_sha256", "rsa_pss_rsae_sha256", "rsa_pkcs1_sha256", "ecdsa_secp384r1_sha384", "rsa_pss_rsae_sha384", "rsa_pkcs1_sha384", "rsa_pss_rsae_sha512", "rsa_pkcs1_sha512", "rsa_pkcs1_sha1"]}, "server": {"profile": "arc", "profile_title": "Wavetronix Arc (working ARC)", "kex": "rsa-only", "kex_title": "RSA key transport only (today's ARC firmware)", "cert_subject": "Wavetronix Arc", "key_type": "RSA", "key_usage": null, "may_encrypt_secret": true, "may_sign": true}, "negotiable": ["TLS_RSA_WITH_AES_256_GCM_SHA384", "TLS_RSA_WITH_AES_128_CBC_SHA", "TLS_RSA_WITH_AES_128_GCM_SHA256", "TLS_RSA_WITH_AES_256_CBC_SHA"], "expected_cipher": "TLS_RSA_WITH_AES_256_GCM_SHA384", "result": "ok", "tls_version": "TLSv1.2", "cipher": "TLS_RSA_WITH_AES_256_GCM_SHA384", "cipher_openssl": "AES256-GCM-SHA384", "cipher_id": "0x009D", "kex": "rsa", "kex_label": "RSA key transport (certificate key encrypts the secret)", "response": "EMP/1.0 READY device=arclab-arc-working tls=TLSv1.2 cipher=TLS_RSA_WITH_AES_256_GCM_SHA384", "ms": 12}, {"ts": 1791790085.1822705, "time": "2026-10-12T07:28:05.182+00:00", "port": 443, "service": "HTTPS REST API", "peer": "fdf::2:47282", "client_hello": {"legacy_version": "TLS 1.2", "ciphers": [{"id": "0x1301", "name": "TLS_AES_128_GCM_SHA256", "kex": "tls13"}, {"id": "0x1302", "name": "TLS_AES_256_GCM_SHA384", "kex": "tls13"}, {"id": "0x1303", "name": "TLS_CHACHA20_POLY1305_SHA256", "kex": "tls13"}, {"id": "0xC02B", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02F", "name": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02C", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xC030", "name": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xCCA9", "name": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xCCA8", "name": "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xC009", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC013", "name": "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC00A", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC014", "name": "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0x009C", "name": "TLS_RSA_WITH_AES_128_GCM_SHA256", "kex": "rsa"}, {"id": "0x009D", "name": "TLS_RSA_WITH_AES_256_GCM_SHA384", "kex": "rsa"}, {"id": "0x002F", "name": "TLS_RSA_WITH_AES_128_CBC_SHA", "kex": "rsa"}, {"id": "0x0035", "name": "TLS_RSA_WITH_AES_256_CBC_SHA", "kex": "rsa"}], "n_ciphers": 17, "offers_rsa_key_transport": true, "offers_ecdhe": true, "offers_tls13": true, "supported_versions": ["TLS 1.3", "TLS 1.2"], "sni": "arclab-arc-working-b2rc4.sprites.app", "groups": ["x25519", "secp256r1", "secp384r1"], "sigalgs": ["ecdsa_secp256r1_sha256", "rsa_pss_rsae_sha256", "rsa_pkcs1_sha256", "ecdsa_secp384r1_sha384", "rsa_pss_rsae_sha384", "rsa_pkcs1_sha384", "rsa_pss_rsae_sha512", "rsa_pkcs1_sha512", "rsa_pkcs1_sha1"]}, "server": {"profile": "arc", "profile_title": "Wavetronix Arc (working ARC)", "kex": "rsa-only", "kex_title": "RSA key transport only (today's ARC firmware)", "cert_subject": "Wavetronix Arc", "key_type": "RSA", "key_usage": null, "may_encrypt_secret": true, "may_sign": true}, "negotiable": ["TLS_RSA_WITH_AES_128_CBC_SHA", "TLS_RSA_WITH_AES_256_GCM_SHA384", "TLS_RSA_WITH_AES_256_CBC_SHA", "TLS_RSA_WITH_AES_128_GCM_SHA256"], "expected_cipher": "TLS_RSA_WITH_AES_128_CBC_SHA", "result": "ok", "tls_version": "TLSv1.2", "cipher": "TLS_RSA_WITH_AES_128_CBC_SHA", "cipher_openssl": "AES128-SHA", "cipher_id": "0x002F", "kex": "rsa", "kex_label": "RSA key transport (certificate key encrypts the secret)", "request": "GET /api/hello HTTP/1.1", "response": "200 OK (468 bytes)", "ms": 10}, {"ts": 1791790285.5813956, "time": "2026-10-12T07:31:25.581+00:00", "port": 443, "service": "HTTPS REST API", "peer": "fdf::2:36212", "client_hello": {"legacy_version": "TLS 1.2", "ciphers": [{"id": "0x1301", "name": "TLS_AES_128_GCM_SHA256", "kex": "tls13"}, {"id": "0x1302", "name": "TLS_AES_256_GCM_SHA384", "kex": "tls13"}, {"id": "0x1303", "name": "TLS_CHACHA20_POLY1305_SHA256", "kex": "tls13"}, {"id": "0xC02B", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02F", "name": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02C", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xC030", "name": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xCCA9", "name": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xCCA8", "name": "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xC009", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC013", "name": "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC00A", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC014", "name": "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0x009C", "name": "TLS_RSA_WITH_AES_128_GCM_SHA256", "kex": "rsa"}, {"id": "0x009D", "name": "TLS_RSA_WITH_AES_256_GCM_SHA384", "kex": "rsa"}, {"id": "0x002F", "name": "TLS_RSA_WITH_AES_128_CBC_SHA", "kex": "rsa"}, {"id": "0x0035", "name": "TLS_RSA_WITH_AES_256_CBC_SHA", "kex": "rsa"}], "n_ciphers": 17, "offers_rsa_key_transport": true, "offers_ecdhe": true, "offers_tls13": true, "supported_versions": ["TLS 1.3", "TLS 1.2"], "sni": "arclab-arc-working-b2rc4.sprites.app", "groups": ["x25519", "secp256r1", "secp384r1"], "sigalgs": ["ecdsa_secp256r1_sha256", "rsa_pss_rsae_sha256", "rsa_pkcs1_sha256", "ecdsa_secp384r1_sha384", "rsa_pss_rsae_sha384", "rsa_pkcs1_sha384", "rsa_pss_rsae_sha512", "rsa_pkcs1_sha512", "rsa_pkcs1_sha1"]}, "server": {"profile": "arc", "profile_title": "Wavetronix Arc (working ARC)", "kex": "rsa-only", "kex_title": "RSA key transport only (today's ARC firmware)", "cert_subject": "Wavetronix Arc", "key_type": "RSA", "key_usage": null, "may_encrypt_secret": true, "may_sign": true}, "negotiable": ["TLS_RSA_WITH_AES_128_CBC_SHA", "TLS_RSA_WITH_AES_256_GCM_SHA384", "TLS_RSA_WITH_AES_256_CBC_SHA", "TLS_RSA_WITH_AES_128_GCM_SHA256"], "expected_cipher": "TLS_RSA_WITH_AES_128_CBC_SHA", "result": "ok", "tls_version": "TLSv1.2", "cipher": "TLS_RSA_WITH_AES_128_CBC_SHA", "cipher_openssl": "AES128-SHA", "cipher_id": "0x002F", "kex": "rsa", "kex_label": "RSA key transport (certificate key encrypts the secret)", "request": "GET /api/hello HTTP/1.1", "response": "200 OK (468 bytes)", "ms": 11}, {"ts": 1791790285.6432092, "time": "2026-10-12T07:31:25.643+00:00", "port": 10443, "service": "EMP", "peer": "fdf::2:32934", "client_hello": {"legacy_version": "TLS 1.2", "ciphers": [{"id": "0x1301", "name": "TLS_AES_128_GCM_SHA256", "kex": "tls13"}, {"id": "0x1302", "name": "TLS_AES_256_GCM_SHA384", "kex": "tls13"}, {"id": "0x1303", "name": "TLS_CHACHA20_POLY1305_SHA256", "kex": "tls13"}, {"id": "0xC02B", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02F", "name": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02C", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xC030", "name": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xCCA9", "name": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xCCA8", "name": "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xC009", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC013", "name": "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC00A", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC014", "name": "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0x009C", "name": "TLS_RSA_WITH_AES_128_GCM_SHA256", "kex": "rsa"}, {"id": "0x009D", "name": "TLS_RSA_WITH_AES_256_GCM_SHA384", "kex": "rsa"}, {"id": "0x002F", "name": "TLS_RSA_WITH_AES_128_CBC_SHA", "kex": "rsa"}, {"id": "0x0035", "name": "TLS_RSA_WITH_AES_256_CBC_SHA", "kex": "rsa"}], "n_ciphers": 17, "offers_rsa_key_transport": true, "offers_ecdhe": true, "offers_tls13": true, "supported_versions": ["TLS 1.3", "TLS 1.2"], "sni": "arclab-arc-working-b2rc4.sprites.app", "groups": ["x25519", "secp256r1", "secp384r1"], "sigalgs": ["ecdsa_secp256r1_sha256", "rsa_pss_rsae_sha256", "rsa_pkcs1_sha256", "ecdsa_secp384r1_sha384", "rsa_pss_rsae_sha384", "rsa_pkcs1_sha384", "rsa_pss_rsae_sha512", "rsa_pkcs1_sha512", "rsa_pkcs1_sha1"]}, "server": {"profile": "arc", "profile_title": "Wavetronix Arc (working ARC)", "kex": "rsa-only", "kex_title": "RSA key transport only (today's ARC firmware)", "cert_subject": "Wavetronix Arc", "key_type": "RSA", "key_usage": null, "may_encrypt_secret": true, "may_sign": true}, "negotiable": ["TLS_RSA_WITH_AES_256_GCM_SHA384", "TLS_RSA_WITH_AES_128_CBC_SHA", "TLS_RSA_WITH_AES_128_GCM_SHA256", "TLS_RSA_WITH_AES_256_CBC_SHA"], "expected_cipher": "TLS_RSA_WITH_AES_256_GCM_SHA384", "result": "ok", "tls_version": "TLSv1.2", "cipher": "TLS_RSA_WITH_AES_256_GCM_SHA384", "cipher_openssl": "AES256-GCM-SHA384", "cipher_id": "0x009D", "kex": "rsa", "kex_label": "RSA key transport (certificate key encrypts the secret)", "response": "EMP/1.0 READY device=arclab-arc-working tls=TLSv1.2 cipher=TLS_RSA_WITH_AES_256_GCM_SHA384", "app_note": "client closed the connection after the handshake without finishing the exchange (BrokenPipeError: [Errno 32] Broken pipe)", "ms": 13}, {"ts": 1791790285.7648416, "time": "2026-10-12T07:31:25.764+00:00", "port": 443, "service": "HTTPS REST API", "peer": "fdf::2:36230", "client_hello": {"legacy_version": "TLS 1.2", "ciphers": [{"id": "0x1301", "name": "TLS_AES_128_GCM_SHA256", "kex": "tls13"}, {"id": "0x1302", "name": "TLS_AES_256_GCM_SHA384", "kex": "tls13"}, {"id": "0x1303", "name": "TLS_CHACHA20_POLY1305_SHA256", "kex": "tls13"}, {"id": "0xC02B", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02F", "name": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02C", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xC030", "name": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xCCA9", "name": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xCCA8", "name": "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xC009", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC013", "name": "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC00A", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC014", "name": "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0x009C", "name": "TLS_RSA_WITH_AES_128_GCM_SHA256", "kex": "rsa"}, {"id": "0x009D", "name": "TLS_RSA_WITH_AES_256_GCM_SHA384", "kex": "rsa"}, {"id": "0x002F", "name": "TLS_RSA_WITH_AES_128_CBC_SHA", "kex": "rsa"}, {"id": "0x0035", "name": "TLS_RSA_WITH_AES_256_CBC_SHA", "kex": "rsa"}], "n_ciphers": 17, "offers_rsa_key_transport": true, "offers_ecdhe": true, "offers_tls13": true, "supported_versions": ["TLS 1.3", "TLS 1.2"], "sni": "arclab-arc-working-b2rc4.sprites.app", "groups": ["x25519", "secp256r1", "secp384r1"], "sigalgs": ["ecdsa_secp256r1_sha256", "rsa_pss_rsae_sha256", "rsa_pkcs1_sha256", "ecdsa_secp384r1_sha384", "rsa_pss_rsae_sha384", "rsa_pkcs1_sha384", "rsa_pss_rsae_sha512", "rsa_pkcs1_sha512", "rsa_pkcs1_sha1"]}, "server": {"profile": "arc", "profile_title": "Wavetronix Arc (working ARC)", "kex": "rsa-only", "kex_title": "RSA key transport only (today's ARC firmware)", "cert_subject": "Wavetronix Arc", "key_type": "RSA", "key_usage": null, "may_encrypt_secret": true, "may_sign": true}, "negotiable": ["TLS_RSA_WITH_AES_128_CBC_SHA", "TLS_RSA_WITH_AES_256_GCM_SHA384", "TLS_RSA_WITH_AES_256_CBC_SHA", "TLS_RSA_WITH_AES_128_GCM_SHA256"], "expected_cipher": "TLS_RSA_WITH_AES_128_CBC_SHA", "result": "ok", "tls_version": "TLSv1.2", "cipher": "TLS_RSA_WITH_AES_128_CBC_SHA", "cipher_openssl": "AES128-SHA", "cipher_id": "0x002F", "kex": "rsa", "kex_label": "RSA key transport (certificate key encrypts the secret)", "request": "GET /api/hello HTTP/1.1", "response": "200 OK (468 bytes)", "ms": 9}, {"ts": 1791790285.8292909, "time": "2026-10-12T07:31:25.829+00:00", "port": 10443, "service": "EMP", "peer": "fdf::2:32950", "client_hello": {"legacy_version": "TLS 1.2", "ciphers": [{"id": "0x1301", "name": "TLS_AES_128_GCM_SHA256", "kex": "tls13"}, {"id": "0x1302", "name": "TLS_AES_256_GCM_SHA384", "kex": "tls13"}, {"id": "0x1303", "name": "TLS_CHACHA20_POLY1305_SHA256", "kex": "tls13"}, {"id": "0xC02B", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02F", "name": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02C", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xC030", "name": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xCCA9", "name": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xCCA8", "name": "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xC009", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC013", "name": "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC00A", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC014", "name": "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0x009C", "name": "TLS_RSA_WITH_AES_128_GCM_SHA256", "kex": "rsa"}, {"id": "0x009D", "name": "TLS_RSA_WITH_AES_256_GCM_SHA384", "kex": "rsa"}, {"id": "0x002F", "name": "TLS_RSA_WITH_AES_128_CBC_SHA", "kex": "rsa"}, {"id": "0x0035", "name": "TLS_RSA_WITH_AES_256_CBC_SHA", "kex": "rsa"}], "n_ciphers": 17, "offers_rsa_key_transport": true, "offers_ecdhe": true, "offers_tls13": true, "supported_versions": ["TLS 1.3", "TLS 1.2"], "sni": "arclab-arc-working-b2rc4.sprites.app", "groups": ["x25519", "secp256r1", "secp384r1"], "sigalgs": ["ecdsa_secp256r1_sha256", "rsa_pss_rsae_sha256", "rsa_pkcs1_sha256", "ecdsa_secp384r1_sha384", "rsa_pss_rsae_sha384", "rsa_pkcs1_sha384", "rsa_pss_rsae_sha512", "rsa_pkcs1_sha512", "rsa_pkcs1_sha1"]}, "server": {"profile": "arc", "profile_title": "Wavetronix Arc (working ARC)", "kex": "rsa-only", "kex_title": "RSA key transport only (today's ARC firmware)", "cert_subject": "Wavetronix Arc", "key_type": "RSA", "key_usage": null, "may_encrypt_secret": true, "may_sign": true}, "negotiable": ["TLS_RSA_WITH_AES_256_GCM_SHA384", "TLS_RSA_WITH_AES_128_CBC_SHA", "TLS_RSA_WITH_AES_128_GCM_SHA256", "TLS_RSA_WITH_AES_256_CBC_SHA"], "expected_cipher": "TLS_RSA_WITH_AES_256_GCM_SHA384", "result": "ok", "tls_version": "TLSv1.2", "cipher": "TLS_RSA_WITH_AES_256_GCM_SHA384", "cipher_openssl": "AES256-GCM-SHA384", "cipher_id": "0x009D", "kex": "rsa", "kex_label": "RSA key transport (certificate key encrypts the secret)", "response": "EMP/1.0 READY device=arclab-arc-working tls=TLSv1.2 cipher=TLS_RSA_WITH_AES_256_GCM_SHA384", "app_note": "client closed the connection after the handshake without finishing the exchange (BrokenPipeError: [Errno 32] Broken pipe)", "ms": 12}, {"ts": 1791790415.4979227, "time": "2026-10-12T07:33:35.497+00:00", "port": 10443, "service": "EMP", "peer": "fdf::2:45758", "client_hello": {"legacy_version": "TLS 1.2", "ciphers": [{"id": "0x1301", "name": "TLS_AES_128_GCM_SHA256", "kex": "tls13"}, {"id": "0x1302", "name": "TLS_AES_256_GCM_SHA384", "kex": "tls13"}, {"id": "0x1303", "name": "TLS_CHACHA20_POLY1305_SHA256", "kex": "tls13"}, {"id": "0xC02B", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02F", "name": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02C", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xC030", "name": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xCCA9", "name": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xCCA8", "name": "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xC009", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC013", "name": "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC00A", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC014", "name": "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0x009C", "name": "TLS_RSA_WITH_AES_128_GCM_SHA256", "kex": "rsa"}, {"id": "0x009D", "name": "TLS_RSA_WITH_AES_256_GCM_SHA384", "kex": "rsa"}, {"id": "0x002F", "name": "TLS_RSA_WITH_AES_128_CBC_SHA", "kex": "rsa"}, {"id": "0x0035", "name": "TLS_RSA_WITH_AES_256_CBC_SHA", "kex": "rsa"}], "n_ciphers": 17, "offers_rsa_key_transport": true, "offers_ecdhe": true, "offers_tls13": true, "supported_versions": ["TLS 1.3", "TLS 1.2"], "sni": "arclab-arc-working-b2rc4.sprites.app", "groups": ["x25519", "secp256r1", "secp384r1"], "sigalgs": ["ecdsa_secp256r1_sha256", "rsa_pss_rsae_sha256", "rsa_pkcs1_sha256", "ecdsa_secp384r1_sha384", "rsa_pss_rsae_sha384", "rsa_pkcs1_sha384", "rsa_pss_rsae_sha512", "rsa_pkcs1_sha512", "rsa_pkcs1_sha1"]}, "server": {"profile": "arc", "profile_title": "Wavetronix Arc (working ARC)", "kex": "rsa-only", "kex_title": "RSA key transport only (today's ARC firmware)", "cert_subject": "Wavetronix Arc", "key_type": "RSA", "key_usage": null, "may_encrypt_secret": true, "may_sign": true}, "negotiable": ["TLS_RSA_WITH_AES_256_GCM_SHA384", "TLS_RSA_WITH_AES_128_CBC_SHA", "TLS_RSA_WITH_AES_128_GCM_SHA256", "TLS_RSA_WITH_AES_256_CBC_SHA"], "expected_cipher": "TLS_RSA_WITH_AES_256_GCM_SHA384", "result": "ok", "tls_version": "TLSv1.2", "cipher": "TLS_RSA_WITH_AES_256_GCM_SHA384", "cipher_openssl": "AES256-GCM-SHA384", "cipher_id": "0x009D", "kex": "rsa", "kex_label": "RSA key transport (certificate key encrypts the secret)", "response": "EMP/1.0 READY device=arclab-arc-working tls=TLSv1.2 cipher=TLS_RSA_WITH_AES_256_GCM_SHA384", "app_note": "client closed the connection after the handshake without finishing the exchange (BrokenPipeError: [Errno 32] Broken pipe)", "ms": 14}, {"ts": 1791790415.5645788, "time": "2026-10-12T07:33:35.564+00:00", "port": 443, "service": "HTTPS REST API", "peer": "fdf::2:59714", "client_hello": {"legacy_version": "TLS 1.2", "ciphers": [{"id": "0x1301", "name": "TLS_AES_128_GCM_SHA256", "kex": "tls13"}, {"id": "0x1302", "name": "TLS_AES_256_GCM_SHA384", "kex": "tls13"}, {"id": "0x1303", "name": "TLS_CHACHA20_POLY1305_SHA256", "kex": "tls13"}, {"id": "0xC02B", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02F", "name": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02C", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xC030", "name": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xCCA9", "name": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xCCA8", "name": "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xC009", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC013", "name": "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC00A", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC014", "name": "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0x009C", "name": "TLS_RSA_WITH_AES_128_GCM_SHA256", "kex": "rsa"}, {"id": "0x009D", "name": "TLS_RSA_WITH_AES_256_GCM_SHA384", "kex": "rsa"}, {"id": "0x002F", "name": "TLS_RSA_WITH_AES_128_CBC_SHA", "kex": "rsa"}, {"id": "0x0035", "name": "TLS_RSA_WITH_AES_256_CBC_SHA", "kex": "rsa"}], "n_ciphers": 17, "offers_rsa_key_transport": true, "offers_ecdhe": true, "offers_tls13": true, "supported_versions": ["TLS 1.3", "TLS 1.2"], "sni": "arclab-arc-working-b2rc4.sprites.app", "groups": ["x25519", "secp256r1", "secp384r1"], "sigalgs": ["ecdsa_secp256r1_sha256", "rsa_pss_rsae_sha256", "rsa_pkcs1_sha256", "ecdsa_secp384r1_sha384", "rsa_pss_rsae_sha384", "rsa_pkcs1_sha384", "rsa_pss_rsae_sha512", "rsa_pkcs1_sha512", "rsa_pkcs1_sha1"]}, "server": {"profile": "arc", "profile_title": "Wavetronix Arc (working ARC)", "kex": "rsa-only", "kex_title": "RSA key transport only (today's ARC firmware)", "cert_subject": "Wavetronix Arc", "key_type": "RSA", "key_usage": null, "may_encrypt_secret": true, "may_sign": true}, "negotiable": ["TLS_RSA_WITH_AES_128_CBC_SHA", "TLS_RSA_WITH_AES_256_GCM_SHA384", "TLS_RSA_WITH_AES_256_CBC_SHA", "TLS_RSA_WITH_AES_128_GCM_SHA256"], "expected_cipher": "TLS_RSA_WITH_AES_128_CBC_SHA", "result": "ok", "tls_version": "TLSv1.2", "cipher": "TLS_RSA_WITH_AES_128_CBC_SHA", "cipher_openssl": "AES128-SHA", "cipher_id": "0x002F", "kex": "rsa", "kex_label": "RSA key transport (certificate key encrypts the secret)", "request": "GET /api/hello HTTP/1.1", "response": "200 OK (468 bytes)", "ms": 10}, {"ts": 1791790415.6154437, "time": "2026-10-12T07:33:35.615+00:00", "port": 10443, "service": "EMP", "peer": "fdf::2:45776", "client_hello": {"legacy_version": "TLS 1.2", "ciphers": [{"id": "0x1301", "name": "TLS_AES_128_GCM_SHA256", "kex": "tls13"}, {"id": "0x1302", "name": "TLS_AES_256_GCM_SHA384", "kex": "tls13"}, {"id": "0x1303", "name": "TLS_CHACHA20_POLY1305_SHA256", "kex": "tls13"}, {"id": "0xC02B", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02F", "name": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02C", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xC030", "name": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xCCA9", "name": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xCCA8", "name": "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xC009", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC013", "name": "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC00A", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC014", "name": "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0x009C", "name": "TLS_RSA_WITH_AES_128_GCM_SHA256", "kex": "rsa"}, {"id": "0x009D", "name": "TLS_RSA_WITH_AES_256_GCM_SHA384", "kex": "rsa"}, {"id": "0x002F", "name": "TLS_RSA_WITH_AES_128_CBC_SHA", "kex": "rsa"}, {"id": "0x0035", "name": "TLS_RSA_WITH_AES_256_CBC_SHA", "kex": "rsa"}], "n_ciphers": 17, "offers_rsa_key_transport": true, "offers_ecdhe": true, "offers_tls13": true, "supported_versions": ["TLS 1.3", "TLS 1.2"], "sni": "arclab-arc-working-b2rc4.sprites.app", "groups": ["x25519", "secp256r1", "secp384r1"], "sigalgs": ["ecdsa_secp256r1_sha256", "rsa_pss_rsae_sha256", "rsa_pkcs1_sha256", "ecdsa_secp384r1_sha384", "rsa_pss_rsae_sha384", "rsa_pkcs1_sha384", "rsa_pss_rsae_sha512", "rsa_pkcs1_sha512", "rsa_pkcs1_sha1"]}, "server": {"profile": "arc", "profile_title": "Wavetronix Arc (working ARC)", "kex": "rsa-only", "kex_title": "RSA key transport only (today's ARC firmware)", "cert_subject": "Wavetronix Arc", "key_type": "RSA", "key_usage": null, "may_encrypt_secret": true, "may_sign": true}, "negotiable": ["TLS_RSA_WITH_AES_256_GCM_SHA384", "TLS_RSA_WITH_AES_128_CBC_SHA", "TLS_RSA_WITH_AES_128_GCM_SHA256", "TLS_RSA_WITH_AES_256_CBC_SHA"], "expected_cipher": "TLS_RSA_WITH_AES_256_GCM_SHA384", "result": "ok", "tls_version": "TLSv1.2", "cipher": "TLS_RSA_WITH_AES_256_GCM_SHA384", "cipher_openssl": "AES256-GCM-SHA384", "cipher_id": "0x009D", "kex": "rsa", "kex_label": "RSA key transport (certificate key encrypts the secret)", "response": "EMP/1.0 READY device=arclab-arc-working tls=TLSv1.2 cipher=TLS_RSA_WITH_AES_256_GCM_SHA384", "app_note": "client closed the connection after the handshake without finishing the exchange (BrokenPipeError: [Errno 32] Broken pipe)", "ms": 13}, {"ts": 1791790415.752772, "time": "2026-10-12T07:33:35.752+00:00", "port": 443, "service": "HTTPS REST API", "peer": "fdf::2:59722", "client_hello": {"legacy_version": "TLS 1.2", "ciphers": [{"id": "0x1301", "name": "TLS_AES_128_GCM_SHA256", "kex": "tls13"}, {"id": "0x1302", "name": "TLS_AES_256_GCM_SHA384", "kex": "tls13"}, {"id": "0x1303", "name": "TLS_CHACHA20_POLY1305_SHA256", "kex": "tls13"}, {"id": "0xC02B", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02F", "name": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "kex": "ecdhe"}, {"id": "0xC02C", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xC030", "name": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384", "kex": "ecdhe"}, {"id": "0xCCA9", "name": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xCCA8", "name": "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "kex": "ecdhe"}, {"id": "0xC009", "name": "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC013", "name": "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC00A", "name": "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0xC014", "name": "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA", "kex": "ecdhe"}, {"id": "0x009C", "name": "TLS_RSA_WITH_AES_128_GCM_SHA256", "kex": "rsa"}, {"id": "0x009D", "name": "TLS_RSA_WITH_AES_256_GCM_SHA384", "kex": "rsa"}, {"id": "0x002F", "name": "TLS_RSA_WITH_AES_128_CBC_SHA", "kex": "rsa"}, {"id": "0x0035", "name": "TLS_RSA_WITH_AES_256_CBC_SHA", "kex": "rsa"}], "n_ciphers": 17, "offers_rsa_key_transport": true, "offers_ecdhe": true, "offers_tls13": true, "supported_versions": ["TLS 1.3", "TLS 1.2"], "sni": "arclab-arc-working-b2rc4.sprites.app", "groups": ["x25519", "secp256r1", "secp384r1"], "sigalgs": ["ecdsa_secp256r1_sha256", "rsa_pss_rsae_sha256", "rsa_pkcs1_sha256", "ecdsa_secp384r1_sha384", "rsa_pss_rsae_sha384", "rsa_pkcs1_sha384", "rsa_pss_rsae_sha512", "rsa_pkcs1_sha512", "rsa_pkcs1_sha1"]}, "server": {"profile": "arc", "profile_title": "Wavetronix Arc (working ARC)", "kex": "rsa-only", "kex_title": "RSA key transport only (today's ARC firmware)", "cert_subject": "Wavetronix Arc", "key_type": "RSA", "key_usage": null, "may_encrypt_secret": true, "may_sign": true}, "negotiable": ["TLS_RSA_WITH_AES_128_CBC_SHA", "TLS_RSA_WITH_AES_256_GCM_SHA384", "TLS_RSA_WITH_AES_256_CBC_SHA", "TLS_RSA_WITH_AES_128_GCM_SHA256"], "expected_cipher": "TLS_RSA_WITH_AES_128_CBC_SHA", "result": "ok", "tls_version": "TLSv1.2", "cipher": "TLS_RSA_WITH_AES_128_CBC_SHA", "cipher_openssl": "AES128-SHA", "cipher_id": "0x002F", "kex": "rsa", "kex_label": "RSA key transport (certificate key encrypts the secret)", "request": "GET /api/hello HTTP/1.1", "response": "200 OK (468 bytes)", "ms": 10}], "now": 1791790801.831497}