title: What is the relationship between the TLS version (1.x) and the cipher suite
body: <p>I'm writing a client server application that requires a secured connection.</p>
  
  <p>I want to understand better the difference between the TLS version (1.x) and the cipher suites that is in use.</p>
  
  <p>this is the result of an nmap scan on my server (scanned for supported TLS options):</p>
  
  <pre><code>PORT    STATE SERVICE
  443/tcp open  https
  | ssl-enum-ciphers:
  |   TLSv1.0:
  |     ciphers:
  |       TLS_DHE_RSA_WITH_AES_128_CBC_SHA (dh 1024) - A
  |       TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256k1) - A
  |       TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A
  |       TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA (dh 1024) - D
  |       TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA (secp256k1) - C
  |       TLS_RSA_WITH_3DES_EDE_CBC_SHA (rsa 2048) - C
  |     compressors:
  |       NULL
  |     cipher preference: server
  |     warnings:
  |       64-bit block cipher 3DES vulnerable to SWEET32 attack
  |       Key exchange (dh 1024) of lower strength than certificate key
  |   TLSv1.1:
  |     ciphers:
  |       TLS_DHE_RSA_WITH_AES_128_CBC_SHA (dh 1024) - A
  |       TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256k1) - A
  |       TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A
  |       TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA (dh 1024) - D
  |       TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA (secp256k1) - C
  |       TLS_RSA_WITH_3DES_EDE_CBC_SHA (rsa 2048) - C
  |     compressors:
  |       NULL
  |     cipher preference: server
  |     warnings:
  |       64-bit block cipher 3DES vulnerable to SWEET32 attack
  |       Key exchange (dh 1024) of lower strength than certificate key
  |   TLSv1.2:
  |     ciphers:
  |       TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA (dh 1024) - D
  |       TLS_DHE_RSA_WITH_AES_128_CBC_SHA (dh 1024) - A
  |       TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 (dh 1024) - A
  |       TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 1024) - A
  |       TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA (secp256k1) - C
  |       TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256k1) - A
  |       TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (secp256k1) - A
  |       TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256k1) - A
  |       TLS_RSA_WITH_3DES_EDE_CBC_SHA (rsa 2048) - C
  |       TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A
  |       TLS_RSA_WITH_AES_128_CBC_SHA256 (rsa 2048) - A
  |       TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A
  |     compressors:
  |       NULL
  |     cipher preference: client
  |     warnings:
  |       64-bit block cipher 3DES vulnerable to SWEET32 attack
  |       Key exchange (dh 1024) of lower strength than certificate key
  |_  least strength: D
  </code></pre>
  
  <p>What does it mean that a cipher suite is supported in more than one version of TLS?</p>