TLS (Transport Layer Security) version 1.3 is a security protocol. It is an upgrade of TLS version 1.2, and provides improvements in speed, efficiency, security and privacy.
Questions tagged [tls1.3]
374 questions
0
votes
0 answers
X509 TLS client certificate device identifier field
i will deploy a fleet of offline only deviced to the field. They will authenticate to each other with a x509 TLS certificate signed by a custom chain, which each will hold inside of a hardware crypto element.
Is there a field in a x509 certificate…
gaiuscosades
- 1
- 2
0
votes
1 answer
With TLS, Does the Transport layer comes after the DNS and again after the data is ready to add the TCP header?
I understand that TLS requires a reliable transport but following the TCP/IP model the first layer in case of sending data/request would be Application layer ... After connection established and the data is ready it moves to the next layer which is…
t2149573
- 335
- 1
- 3
- 10
0
votes
1 answer
Does .NET 6.0 have its own cryptography libs that will enable more secure ciphers than the OS supports?
Does .NET 6.0 have its own libraries that will allow support for later more secure cryptography ciphers for TLS that are not currently support on Windows 2012?
Eg TLS 1.3 or 1.2 with GCM or POLY1305 ciphers
Joel Duckworth
- 5,455
- 3
- 20
- 21
0
votes
1 answer
OpenSSL 1.1.1 PSK TLS1.3 - no suitable signature algorithm error with TLS_256_GCM_SHA384 ciphersuite
I'm running some tests in windows with OpenSSL 1.1.1l 24 Aug 2021,
using s_client and s_server for both PSK TLS_128_GCM_SHA256 and TLS_256_GCM_SHA384.
For PSK TLS_128_GCM_SHA256 i'm able to stablish the connection sucessfully:
SERVER:
$openssl…
anotherdeveloper
- 3
- 1
- 3
0
votes
1 answer
Having a problem securing an Express API with TLS
I have a REST API running on Node JS with Express.
I keep having issues with CORS because the front end is HTTPS and the backend API is HTTPS which frequently, but not always gets reported as a violation.
I am trying to secure the API with a Let's…
Tex Evans
- 47
- 1
- 8
0
votes
0 answers
Session keys don't use asymetrical encryption?
I'm learning about how https, SSL and TLS work. From what I learned, when you received a certificate from a certified server, you get a public key to encrypt your http requests, but what I'm not sure to understand is why your browser have to…
Philz97
- 31
- 3
0
votes
1 answer
Q: mitmproxy - negotiate TLS downgrade on internal NIC?
I am completely new to mitmproxy and I'm working my way through the docs, but I have a specific requirement from my management in picking a proxy to work with. Specifically we need the ability to accept an incoming (outbound/external facing)…
Greg Maples
- 1
- 1
0
votes
1 answer
How to enable certificate_authorities extension in Jetty with TLS 1.3
I recently updated my Jetty server (11.0.1) to TLS 1.3 (jre 11.0.9.1).The server do not send trusted certificate_authorities anymore in the CertificateRequest phase (client certificate authentication is required).
Consequently, in the prompt window,…
mlapeyre
- 202
- 3
- 8
0
votes
2 answers
Is it possible to log the server certifcate in PEM format with javax.net.debug?
I'm troubleshooting some SSL/TLS problems, with -Djavax.net.debug on the command line and it would help immensely to have some logging where the server certificate is logged in a format which can be parsed and read.
I tried following debug…
bramdc
- 580
- 1
- 5
- 21
0
votes
1 answer
Why is the MinVersion flag being ignored in my Go code?
I'm trying to debug a failing connection to a given host. I've recorded packet captures for successful requests made to this host via the browser, as well as unsuccessful requests made via my Go code below:
package main
import (
…
jrolf
- 3
- 1
0
votes
0 answers
Server certificate Invalid or Not present
I am using NetHTTPRequest1() at a Delphi App which is doing a get request which works on Windows 10 but not on windows 7 I also tried to enable tls1.0, tls1.2, tls1.3 but it didn't seem to work. Any Ideas about what am I doing wrong? The App is…
yannis_kal
- 55
- 6
0
votes
1 answer
Can't update mosquitto-clients from 1.4.15 to 1.6.9
To update mosquitto-clients, I have tried
sudo apt-get update
sudo apt-get install mosquitto-clients
However, this doesn't update the version for me.
Reading package lists... Done
Building dependency tree
Reading state information...…
phoenix
- 1
- 1
0
votes
1 answer
0
votes
1 answer
TLS1.3 OpenSSL tls alert unrecognized_name do not appear
trying to provoke a TLS alert unrecognized_name for TLS1.3 using OpenSSL but it doesn't appear.
For TLS1.2 it works. Does anyone understand why? Here are examples of commands:
openssl s_server -accept 9443 -key signed-pem.key -cert signed-pem.cert…
dmytro
- 3
- 3
0
votes
1 answer
How to use a particular protocol for javamail?
There is a javamail protocol property
mail.smtp.ssl.protocols
This allows the user to use a particular protocol (TLSv1.2 or 1.1).
What if the property is not used? Will it be then set by the JVM settings?
Also if I want to use TLSv1.3, what version…
Tas
- 115
- 3
- 12