Secure transport layer protocol detection method and device, computer equipment and storage medium

Abstract

The invention discloses a secure transport layer protocol detection method. The method comprises the following steps: configuring self-defined expansion items in a client and a server respectively; detecting whether the client supports a national secret SSL protocol, and if so, adding a callback function in the client; detecting whether the server side is configured with a national secret SSL protocol, if so, adding a user-defined expansion item in a handshake message of the server side, setting the value of the user-defined expansion item to be non-null, and returning the handshake message to the client side; and judging whether a user-defined expansion item is added to the handshake message and the value of the user-defined expansion item is non-null, if so, triggering a callback function by the client, directly disconnecting the current handshake action, and initiating a handshake request again through the national secret SSL protocol. The invention further discloses a device for implementing the method, computer equipment and a storage medium. According to the invention, the selection and deployment problems of the secure transport layer protocols of the client and the server in a complex environment can be simplified.

Description

technical field [0001] The present invention relates to the technical field of security transport layer protocol, in particular to a detection method, device, computer equipment and storage medium of a security transport layer protocol. Background technique [0002] Under the background of the current international development, the demand and application of the national secret SSL is gradually expanding, and the mainstream browsers do not support the national secret protocol, so the client that supports the national secret SSL emerges at the historic moment. [0003] However, currently there is no method for the SSL client and server that supports the National Secret Protocol to self-negotiate the SSL protocol. It can only be configured to support either the National Secret Protocol or the TLS 1.0 / 1.2 / 1.3 protocol. This obviously cannot meet the situation where both the link using the national secret protocol and the link using TLS are required. [0004] Therefore, if the c...

AI Technical Summary

Problems solved by technology

[0010] The technical problem to be solved by the present invention is to provide a security transport layer protocol detection method that simplifies the selecti

Images