--- /n/sources/plan9/sys/src/libsec/port/tlshand.c	Sat Jun 14 00:00:00 2025
+++ /sys/src/libsec/port/tlshand.c	Sun Jun 28 00:00:00 2026
@@ -268,6 +268,10 @@
 	TLS_DHE_DSS_WITH_AES_256_CBC_SHA	= 0X0038,
 	TLS_DHE_RSA_WITH_AES_256_CBC_SHA	= 0X0039,
 	TLS_DH_anon_WITH_AES_256_CBC_SHA	= 0X003A,
+	TLS_RSA_WITH_AES_128_CBC_SHA256		= 0X003C,
+	TLS_RSA_WITH_AES_256_CBC_SHA256		= 0X003D,
+	TLS_RSA_WITH_AES_128_GCM_SHA256		= 0X009C,
+	TLS_RSA_WITH_AES_256_GCM_SHA384		= 0X009D,
 	TLS_DHE_RSA_WITH_AES_128_CBC_SHA256	= 0X0067,
 	TLS_DHE_RSA_WITH_AES_128_GCM_SHA256	= 0X009E,
 	TLS_EMPTY_RENEGOTIATION_INFO_SCSV	= 0x00FF,
@@ -335,7 +339,11 @@
 	{"rc4_128", "sha1", 2*(16+SHA1dlen), TLS_RSA_WITH_RC4_128_SHA},
 	{"3des_ede_cbc", "sha1", 2*(4*8+SHA1dlen), TLS_RSA_WITH_3DES_EDE_CBC_SHA},
 	{"aes_128_cbc", "sha1", 2*(16+16+SHA1dlen), TLS_RSA_WITH_AES_128_CBC_SHA},
-	{"aes_256_cbc", "sha1", 2*(32+16+SHA1dlen), TLS_RSA_WITH_AES_256_CBC_SHA}
+	{"aes_256_cbc", "sha1", 2*(32+16+SHA1dlen), TLS_RSA_WITH_AES_256_CBC_SHA},
+	{"aes_128_gcm_aead", "clear", 2*(16+4), TLS_RSA_WITH_AES_128_GCM_SHA256},
+	{"aes_256_gcm_aead", "clear", 2*(32+4), TLS_RSA_WITH_AES_256_GCM_SHA384, 1},
+	{"aes_128_cbc", "sha256", 2*(16+16+SHA2_256dlen), TLS_RSA_WITH_AES_128_CBC_SHA256},
+	{"aes_256_cbc", "sha256", 2*(32+16+SHA2_256dlen), TLS_RSA_WITH_AES_256_CBC_SHA256}
 };
 
 static uchar compressors[] = {