TLS (Transport Layer Security) version 1.3 is a security protocol. It is an upgrade of TLS version 1.2, and provides improvements in speed, efficiency, security and privacy.
Questions tagged [tls1.3]
374 questions
0
votes
1 answer
Disable TLS 1.3 in Twisted Python
How do I disable TLS 1.3 in a Twisted server? Here's my code that should disable TLS 1.3, but doesn't:
from twisted.internet import ssl
ciphers = ssl.AcceptableCiphers.fromOpenSSLCipherString(
…
Jon
- 19
- 6
0
votes
1 answer
Does OpenSSL *require* the application to send/read non-application data?
Let's suppose there is a client and a server, and the server sends a rekey request, or any other non-application data that might or might not be important (speaking generally here). I want to know if I am bound to sending and reading data for…
user15832549
0
votes
1 answer
OpenSSL::SSL::SSLServer doesn't add peer_cert
I have server working that looks a little bit like this
require "socket"
require "openssl"
require "thread"
listeningPort = Integer(ARGV[0])
server = TCPServer.new(listeningPort)
sslContext = OpenSSL::SSL::SSLContext.new
sslContext.cert =…
defunct
- 11
- 1
0
votes
1 answer
PHP 8 $_SERVER['SSL_PROTOCOL'] is missing on some servers, how to determine encryption protocl and version
We recently upgraded our servers to PHP 8 and on one of the servers the $_SERVER['SSL_PROTOCOL'] variable is missing.
I couldn't find any reference to it on php.net.
I am aware that some variables are pulled from other parts of the system though…
John
- 1
- 13
- 98
- 177
0
votes
1 answer
Python SSL Verify Alternative Domain
I intend to connect to the remote host example.com over TLS but I have to connect through a proxy IP address with DNS name example-proxy.com.
I don't have control over the SSL certificate and I cannot ask the admin at example.com to add…
John
- 3
- 1
0
votes
0 answers
Getting post-handshake New Session Ticket non interactively using openssl s_client -connect
I am trying to automate a TLS handshake and get the session information in a .pem file, using the following command:
openssl s_client -connect www.domain.com:443 -sess_out domain.pem
Every time that command is entered, a connection is started and…
jess
- 1
0
votes
1 answer
"nghttp2::asio_http2::client" with TLS 1.3 - SSL_CTX_set_cipher_list doesnt add cipher suite in cipher suites
I use nghttp2 asio_http2_client with TLS 1.3 protocol, but when i try to add additional suites in cipher suites list via SSL_CTX_get_ciphers function, i don't see anything changes in my Client hello message. I.e. cipher suites list stay without…
Vladimir Pogonin
- 83
- 1
- 4
0
votes
0 answers
okhttp client errors after setup client for server authentication confirmation
We are trying to use the minio-java client that uses okhttp client for uploading object to buckets. Currently the server that we use supports only server authentication and not mutual tls and this mainly means that we have to verify the certificates…
EVOLGR
- 1
0
votes
1 answer
In vert.x web app, how to enable the usage of TLS 1.3 in a web application
In a vert.x web application, does someone know by chance how to add TLS 1.3 and disable all prior versions of TLS used by default(TLS 1.1, TLS 1.2?
Thank you very much for your help.
tatiana77
- 21
- 3
0
votes
1 answer
WolfSSL: Resume Session failure due to configuration issue of build (cmake)
I am using an Ubuntu 20.04 machine along with the CLion IDE 2020.3.2 and I want to create an app using WolfSSL which would need the TLS1.3 implementation of it.
Using CLion, I cloned the official repository https://github.com/wolfSSL/wolfssl.git.…
0
votes
0 answers
How to create a TLS 1.3 CertificateVerify message with OpenSSL in C/C++?
I need to implement the TLS 1.3 protocol myself, using OpenSSL just as crypto-backend. I got stuck at server CertificateVerify message - can't figure out how to create it. Here is a code and some files at git (single cpp-file, 216 lines of code, but…
Iceman
- 365
- 1
- 3
- 17
0
votes
0 answers
How do I prevent TCP Resets after closing file descriptor that I've already called SSL_shutdown on?
I'm using OpenSSL 1.1.1 to add TLS 1.3 support for a client written in C that has previously communicated with the server over plain TCP. The setup, handshake, cert authentication and communication with the server happens correctly.
The problem…
ShivanKaul
- 687
- 1
- 8
- 21
0
votes
0 answers
TLS 1.3 and SSLVerifyClient don't work, but it does with TLS 1.2
I'm having a problem when trying to enable SSLVerifyClient, so users can access using a cert installed on their browser.
I have created the CA, the certs, the keys and everything. On my Apache conf, I have this:
DocumentRoot…
Peter
- 1
- 1
0
votes
2 answers
Client-server TLS with custom CA
I wrote a small test program that creates
a custom, self-signed CA certificate#1
creates a server certificate#2 issued by that CA - root certificate#1
creates a server with certificate#2
creates a client with RootCA pointing to certificate#1
the…
Valo
- 1,872
- 2
- 15
- 23
0
votes
0 answers
How to find .so in the same directory as the executable?
According to TLS 1.3 & OpenSSL 1.1.1 on Linux I can use TLS 1.3 under linux in my "Console App (.NET Core)" project.
My codes
using System;
using System.IO;
using System.Net.Security;
using System.Net.Sockets;
using System.Reflection;
using…
user13431110