Stack Overflow
Stack Overflow

Questions tagged [tls1.3]

TLS (Transport Layer Security) version 1.3 is a security protocol. It is an upgrade of TLS version 1.2, and provides improvements in speed, efficiency, security and privacy.

374 questions
0
votes
1 answer

How to fix "net/http: TLS handshake timeout" issues on macOS

I was running into net/http: TLS handshake timeout issues with some golang programs on macOS.
dmaclach
  • 3,403
  • 1
  • 21
  • 23
0
votes
1 answer

Low level TLS handshake?

I'd like to intercept ALPN selection and select the one I want instead of the first common one between the client and the server. Code: // we have some ALPN protocols and certificates for TLS/SSL tlsConfig := &tls.Config { Certificates:…
winwin
  • 958
  • 7
  • 25
0
votes
1 answer

TLS 1.3 Support with WinINet API

Using WinINet family API (InternetConnect, HttpOpenRequest and more) to download files. Migrating application to support TLS 1.3 and found no way to support TLS 1.3 with WinINet. Tried changing registry settings like…
Peeyush Jain
  • 21
  • 2
0
votes
0 answers

How to connect to RabbitMQ server with TLS without certificate in Node

I need help connecting to RabbitMQ with TLS using Node. The client gave us credentials for connecting to their RabbitMQ server. They say we don’t need any certificates for TLS connection, and I’m using NodeJS. We’re getting this…
E.Belekov
  • 467
  • 1
  • 7
  • 14
0
votes
1 answer

Fetch SCT list from x509 certificate

How can I fetch this SCT list from PCCERT_CONTEXT? Is there any straightforward win API?
azhahes.s
  • 35
  • 1
  • 5
0
votes
2 answers

SSL error when open jupyter notebook in Microsoft Edge

I'm opening a jupyter notebook in an Ubantu with MobaXterm. At first , everything worked well and jupyter notebook can be open normally. Suddenly one day when I open it in Microsoft Edge by typing "jupyter notebook", it gives the following message…
cur_cur_sheep
  • 1
  • 1
0
votes
1 answer

SSL alert number 70 with TLSv1.3

# nginx -V nginx version: nginx/1.21.4 built with OpenSSL 1.1.1f 31 Mar 2020 I've configured nginx to support TLSv1.3. ssl_protocols TLSv1.2 TLSv1.3; but i can't reach my host using TLSv1.3: # openssl s_client -connect hostname.com:443…
CrazyRabbit
  • 251
  • 3
  • 10
0
votes
1 answer

openssl clientcertificate not workign for me (TLS1.3)

I am using below command line for openssl openssl s_server -tls1_3 -state -Verify 1 -key Nexus_Dev.pk8 -cert Nexus_Dev.crt -CAfile NexusDevCA.my.cer -accept 3443 -tlsextdebug I want to create server requesting client certificate over TLS1.3. First…
Vijay
  • 2,021
  • 4
  • 24
  • 33
0
votes
1 answer

Is ALPN mandatory for server to establish TLSv1.3 connection via http/2 ("h2") protocol?

I know, that if we talk about non secured connection, it is possible to establish connection via http/2 protocol without ALPN. But what about TLS connection? In RFC said: A client MUST send the connection preface (Section 3.5) and then MAY …
Igor_M
  • 308
  • 2
  • 12
0
votes
1 answer

How do I include issuing/intermediate CA certificates in mutual TLS/gRPC

I am working in C++ adopting mTLS for communication in a peer network. I have a private root CA and one issuing CA. The gRPC server struct for a secure TLS channel looks as follows: struct SslServerCredentialsOptions { explicit…
sn0wbl1nd
  • 36
  • 1
  • 4
0
votes
0 answers

Is it possible to use an asio ssl stream class to alternate between encrypted and clear traffic?

I am writing a client server application using the standalone version of asio. I would like to use the same tcp socket for ssl and non ssl traffic. Say I have a variable m_socket of type asio::ssl::stream, where I have already…
Fabio
  • 2,105
  • 16
  • 26
0
votes
1 answer

How to attach multiple certificate-key pairs to a TLS client? is it possible?

Can we attach multiple certificate-key pairs to a single TLS client? Say for example:- Is it possible to have - client-A has a certificate-1 signed from CA-1 and certificate-2 signed by CA-2 and so on. Assuming each certificate will have its own…
Hemanth
  • 5,035
  • 9
  • 41
  • 59
0
votes
1 answer

ora-29259 end-of-input reached using UTL_HTTP.BEGIN_REQUEST

I am making a stored procedure with 2 seperate HTTP Requests. The first one to get an Atuthentication Token and the second one that uses the token. The first Request works without a problem and I get the token back. The second Request throws the…
Lukas Knirschnig
  • 9
  • 4
0
votes
1 answer

In GRPC, how to selectively require Client Certificate for a few services but not require it for other services?

In TLS mutual authentication, I am aware that ClientAuth(io.grpc.netty.shaded.io.netty.handler.ssl.ClientAuth to be precise) has three modes: None - Server does not request for any client certificate Optional - Server requests for a client…
Uma Priyadarsi
  • 85
  • 1
  • 3
  • 11
0
votes
1 answer

Updating OpenJDK Version in an Older jboss/wildfly Docker Image

For TLSv1.3 support we need min Java 8u261-b12 version as discussed here. How can we update Open JDK version to 8u lastest in an older Docker Image such as jboss/wildfly:10.1.0.Final? Is there a best practice for that? My DockerFile starts like…
Burcin
  • 973
  • 1
  • 9
  • 25
1 2 3
…
24 25