Questions tagged [tls1.3]

TLS (Transport Layer Security) version 1.3 is a security protocol. It is an upgrade of TLS version 1.2, and provides improvements in speed, efficiency, security and privacy.

374 questions
0
votes
0 answers

setting TLS ciphers suit for htttp client

const ciphers = [ 'TLS_CHACHA20_POLY1305_SHA256', 'TLS_AES_128_GCM_SHA256', 'TLS_AES_256_GCM_SHA384', 'TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256' ]; const agent = new Agent({ ciphers: ciphers.join(':'), honorCipherOrder: true, minVersion:…
Dartz
  • 11
  • 4
0
votes
1 answer

Java SSLServerSocket: Request client certificate allowing ANY client certificate

I followed these threads and others with similar examples: How to create a secured TCP connection via TLS v.1.2 in Java Accept server's self-signed ssl certificate in Java client I've already achieved a client/server simple Java program using any…
Dertalai
  • 198
  • 1
  • 9
0
votes
0 answers

Powershell Invoke-WebRequest could not create ssl/tls secure channel when tls is upgrade to tls1.3

there is a powershell script running as a remote process on uDeploy, below is the script: [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12 Invoke-WebRequest -Uri https://xxx/api/health it was working fine until the…
user13904118
  • 87
  • 1
  • 8
0
votes
0 answers

Sockets Python | chatting server multiple clients

i am trying to implement a TLS secured socket server in python, and i want multiple clients to connect to the server and talk to each other, what i would like to do is that each client connecting can receive messages sent by other clients…
Amir Amara
  • 39
  • 9
0
votes
1 answer

How to download a file from TLS1.3 enabled web site on Windows 10 using webclient or httpclient in C#

I am trying to download a file from UK government official site using WebClient and HttpClient in C# Following is the site which i guess is using TLS1.3 https://www.gov.uk/government/publications/the-uk-sanctions-list and i want to download…
0
votes
1 answer

"System.ComponentModel.Win32Exception (0x80090308): The token supplied to the function is invalid" when TLS13 is enabled

After adding the below registry key to enable TLS1.3 on Windows Server 2022 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Client] "DisabledByDefault"=dword:00000000 "Enabled"=dword:00000001 The…
subbaraoc
  • 1,123
  • 1
  • 8
  • 27
0
votes
1 answer

Java 8 Cipher Suites downgraded with later update?

Per https://java.com/en/configure_crypto.html, the website says that "For TLS 1.3, TLS_AES_256_GCM_SHA384 will now be preferred over TLS_AES_128_GCM_SHA256." but with the later updates TLS_AES_256_GCM_SHA384 is no longer available as supported…
Zera42
  • 2,592
  • 1
  • 21
  • 33
0
votes
0 answers

JDBC driver not using latest TLS offered version when connecting to a service

JDBC driver not using latest TLS offered version when connecting to a service. When connecting to said service, the server return multiple TLS versions that it support (1.0, 1.1 and 1.2). Yes, I know.... lol We did try with multiple JDBC driver…
yield
  • 264
  • 4
  • 13
0
votes
1 answer

How to make a cx_oracle connection encrypted with TLS? Do I have to use Oracle Wallets?

Need to use cx_oracle module with python 3.x version to connect Oracle 19c with TLS. There are firewalls and proxies. How to implement it? Do I have to use Oracle Wallets? Is TLS 1.2 good enough or I need TLS 1.3 in 2022? import cx_Oracle conn =…
user14676730
0
votes
0 answers

Does godaddy SSL certificate supports TLS v1.3? If yes how can we enable the v1.3

As TLS version v1.0 and v1.1 is outdated am just disabling these version and need to enable the v1.3 in Nginx webserver. I added tls v1.2 v1.3 in main nginx.conf file and changed the options-ssl-nginx.conf for tls v1.2 v1.3 my options-ssl-nginx.conf…
jayaprakash R
  • 152
  • 3
  • 13
0
votes
0 answers

TLS error "TLS_DHE_RSA" in ev ssl certificate

Install an EV ssl certificate on the company's website, but I get these "errors" although they are not so drastic I want to solve it, could you help me with…
0
votes
0 answers

How to replicate mandatory requirement of server certificate on the REST API client system?

I am developing a desktop client application for an https-protocol based REST API provided by a third party. I want to test the programmatic communication with the API when the server's certificate is not installed on my local computer. For this, I…
AllSolutions
  • 1,176
  • 5
  • 19
  • 40
0
votes
1 answer

E-Mails of PHPMailer still getting into SPAM on some clients even after adding SPF-record

So I developed an automated Mailing System through which I send automated e-mails in PHP using the PHPMailer Extension. First, most of the e-mails I've sent with the PHPMailer dropped into the spam of several clients, a well-known issue. I've…
DevelJoe
  • 856
  • 1
  • 10
  • 24
0
votes
2 answers

How to specify SCT(Signed Certificate Timestamp) data to send as a TLS extension in openssl?

I want to send SCT(Signed Certificate Timestamp) data on server side as a TLS extension, But I did not find any functions that support this operation in the openssl manpage(https://www.openssl.org/docs/man1.1.1/man3/).Thanks for help if there is any…
0
votes
1 answer

TLS 1.3 via Guzzle where libcurl only supports 1.2

I need to be able to use TLS 1.3 via Guzzle (as the end point only supports 1.3). The problem I'm finding is that it goes against Centos 7 to upgrade to a high enough version of libcurl to get TLS 1.3 - which would be a bad idea for the stability of…
jdawg
  • 508
  • 2
  • 5
  • 18