Questions tagged [tls1.3]

TLS (Transport Layer Security) version 1.3 is a security protocol. It is an upgrade of TLS version 1.2, and provides improvements in speed, efficiency, security and privacy.

374 questions
0
votes
1 answer

Delayed certificate in TLS 1.3

In ASP.NET Core there are 4 available certificate modes: // Summary: // A client certificate is not required and will not be requested from clients. NoCertificate, // Summary: // A client…
Szyszka947
  • 473
  • 2
  • 5
  • 21
0
votes
1 answer

Can I use TLSv1.3 ciphers in TLSv1.2 session?

Windows IIS Server 10 supported TLS_AES_256_GCM_SHA384 on TLS 1.3. But my application max TLS version TLS 1.2 . I can't send request to server due to tls mismatch. TLS_AES_256_GCM_SHA384 is not found in my app. How can I use this CipherSuite ? Note…
star.java
  • 11
  • 5
0
votes
2 answers

Communication sample for SMTP over TLS (known as SSL/TLS)

I am trying to implement SSL/TLS im my SMTP server (PHP). Securing the connection with TLSv1.3 works, and the certificate (LetsEncrypt) is valid. I tested this with https://www.checktls.com/TestReceiver where it only works when I activate 'Direct…
Spider IT
  • 73
  • 1
  • 10
0
votes
1 answer

Bad record MAC on TLS v1.3 when using early_data

I have a project to complete in Ruby involving TLS v.1.3. I want to optimize requests and thus use "early data". I'm using a package called tttls1.3 and the client works until I send early data to the server. What's even more wired is that a request…
xpepermint
  • 35,055
  • 30
  • 109
  • 163
0
votes
0 answers

How to verify a Postgres database is SSL enabled?

I am trying to setup SSL on a postgres database instance. Tested using self-signed certificates. Here are the steps which I followed: openssl genrsa -out rootCA.key 2048 openssl req -x509 -new -key rootCA.key -days 1000 -out rootCA.crt openssl…
Kalit Inani
  • 59
  • 1
  • 10
0
votes
0 answers

Getting "Caught Error Domain NSURLErrorDomain Code=-1200 "An SSL error has occurred and a secure connection to the server cannot be made"?

We've enabled ATS restrictions in our app, and everything works fine, except sometimes, randomly, the CDN download resource fails. In most cases, it happens to users who on iOS 14.* and WiFI (VPN helps solve the problem …
DevSemenuk
  • 111
  • 7
0
votes
1 answer

unable to upgrade TLS protocol to its latest TLSv1.3 in nginx server

I want to upgrade my TLS protocol to TLSv1.3 for which the requirement is nginx version should be above 1.15 and OpenSSL version is 1.1.1, so I have upgraded my OpenSSL and Nginx to the latest, and it shows the newest version when I'm checking it on…
0
votes
1 answer

Subject doesn't qualify for public certification SearXNG

I have been following a tutorial by NetworkChuck setting up SearXNG on Linode so i can "ditch Google". I have followed all the instructions and yet i keep getting this error: terminal This in turn, stops the website from working. Does anyone know…
0
votes
0 answers

How to fix TLS/SSL vulnerabilities in windows server?

Currently on our windows server (Windows 2016 R2) , we have following cipher suites…
anonymous
  • 21
  • 7
0
votes
1 answer

SChannel TLS 1.3 mystery additional message

A while ago I implemented a client and server using SChannel to encrypt communication. Recently I made the required switch from the SCHANNEL_CRED struct to the SCH_CREDENTIALS one so that TLS 1.3 support is provided in Windows 11. However, I…
Kemp
  • 3,467
  • 1
  • 18
  • 27
0
votes
1 answer

Tls 1.3 client hello structure. in C supported on Linux Userspace. Can anyone please tell what struct should look like to represent client hello

I like to understand tls by code. tls 1.3 and cipher suits so I started and at first I found in tls 1.3 handshake is client initiate the handshake with the server with hello message. On the documentation on this page…
user786
  • 3,902
  • 4
  • 40
  • 72
0
votes
1 answer

How to reuse session and the port number in TCP-TLS communication using Cloudbees- TcpSyslogMessageSender

We have a syslog client in our application and it is implemented using Cloudbees- TcpSyslogMessageSender. We are creating the context and connHow to reuse the session and port number in TCP-TLS communication using Cloudbees-…
0
votes
1 answer

Does SChannel support key update requests for TLS v1.3?

How can I request a key update on a TLS v1.3 connection implemented with Win32's SChannel? In other words, what is the Win32 function that provides similar functionality as SSL_key_update() in OpenSSL? I did not find any useful information in the…
Andreas Mueller
  • 201
  • 4
  • 13
0
votes
0 answers

How get session key from ssl session

I created client and server program to exchange the data. Client and server uses tls to pass the message securely. Used openssl to make the connection between server and client. Now i have the ssl handle. Is there any way to extract server write…
user1897937
  • 379
  • 1
  • 4
  • 9
0
votes
0 answers

how i can enable TLS before calling .exe inside PS1 file

I have a ps1 file which calls a .exe, as follow:- Show-Message -Message "Step 1a: Create groups and adding users to it" & "$HelperPath\Microsoft.Legal.MatterCenter.CreateGroups.exe" "true" $Username $Password now this will raise the following…
John John
  • 1
  • 72
  • 238
  • 501