TLS (Transport Layer Security) version 1.3 is a security protocol. It is an upgrade of TLS version 1.2, and provides improvements in speed, efficiency, security and privacy.
Questions tagged [tls1.3]
374 questions
0
votes
1 answer
TLS 1.3 not working on Nginx 1.17.6 / Ubuntu 18.04 / OpenSSL 1.1.1
I'm hosting at Digital Ocean with Ubuntu 18.04, Nginx version 1.17.6, OpenSSL version 1.1.1 . - I believe those satisfy requirements for TLS 1.3.
In my /etc/nginx/nginx.conf file I added TLSv1.3 like so:
ssl_protocols TLSv1 TLSv1.1 TLSv1.2…
geochanto
- 972
- 2
- 13
- 45
0
votes
1 answer
runtime error on mosquitto_pub with TLS v1.3 enabled at build time
I am working on an application that requires TLS v1.3 & MQTT v5.0, and I have to build mosquitto MQTT brokers and subscribers, on Debian system of different physical hosts, as part of my work.
From mosquitto Github repository, I managed to build…
Ham
- 703
- 8
- 17
0
votes
1 answer
Is TLSv1.3 recommended today in production
Security guides (PCI-DSS, NIST, www.ncsc.gov.uk, french ANSSI ..) state that TLSv1.2 only should be allowed, and that TLSv1.0 TLSv1.1 should be desactivated.
There is no security guide that give any explicit recommandation for TLSv1.3.
My…
OlivierThompson
- 11
- 3
0
votes
1 answer
Does only TLS_AES_128_GCM_SHA256 cipher work for psk connections for TLS 1.3?
I have a server running on Ubuntu 1804 with OpenSSL 1.1.1 11 Sep 2018.
Clients talk to the server using PSK authentication with PSK-AES256-CBC-SHA as the cipher.
When I use a client built on Windows with openssl-1.1.1c (built using Microsoft Visual…
skboro
- 195
- 10
0
votes
0 answers
How to enable tls1.3 in nginx?
I am setting up nginx in the below configured server
NAME="Red Hat Enterprise Linux Server"
VERSION="7.6 (Maipo)"
ID="rhel"
ID_LIKE="fedora"
VARIANT="Server"
VARIANT_ID="server"
VERSION_ID="7.6"
PRETTY_NAME="Red Hat Enterprise Linux Server 7.6…
rakeshh92
- 885
- 2
- 10
- 18
0
votes
1 answer
How and When the Handshake Protocol to use to the Certificate private key?
How does the server using the Certificate Private Key to create Certificate Verify message in TLS 1.3? And how the Client using the Certificate public key to verify the handshake not to be modify? Just in TLS 1.3 not TLS 1.2
Lin Weiye
- 185
- 2
- 13
-1
votes
0 answers
When I tried to access my locally created the HTTPS server using browser, the connection immediately dropped
The server run into the errors but when I open the https://localhost:8080/ using the browser. As follow:
error: Uncaught (in promise) Http: error writing a body to connection: tls handshake eof: tls handshake eof
for await (const req of…
fwqaaq
- 1
-1
votes
0 answers
TLS v1.2 to TLSv1.3 converter or HTTP to HTTPS "translator"
Since a few days now, I'm facing a problem.
I have a client who use an old system on a local network (XP) with Firefox V39 to access local webservers (IHM). The client can't update Firefox.
I have now to install a new equipment with a HTTPS…
-1
votes
1 answer
Cannot connect to SQL Server 2014 using java 8 (zulu 8u332)
My application is connected to MSSQL Server 2014 and is developed using Java 8(zulu 8u332-8.62.0.19).
The database do not have SSL enabled.
The following error appears: The driver could not establish a secure connection to SQL Server by using Secure…
junior-java-dev
- 1
- 1
-1
votes
1 answer
How to use scapy to decrypt TLS traffic and print the http headers
I want to decrypt TLS traffic in a pcap file using scapy by providing certificate and private key.
But i dont have a clue how to do it without using wireshark or tshark
Could someone give me some suggestions? Thanks in advance.
user2880496
- 11
- 1
-1
votes
1 answer
How can I add "set_read_timeout" from TcpStream to TlsStream?
I'm new to Rust and I love the language more and more. I downloaded crate "native-tls" and it has the TlsStream element which replaces TcpStream but it doesn't have the "set_read_timeout" method. How do I access it by mixing libraries or something…
navetix
- 25
- 4
-1
votes
1 answer
How and Why the last 8 bytes MUST be overwritten in TLS 1.3 as described below if negotiating TLS 1.2 or TLS 1.1?
In RFC 8446. About the random in ServerHello send by Server.
In 4.1.3. Server Hello
32 bytes generated by a secure random number generator. See Appendix C for additional information. The last 8 bytes MUST be overwritten as described below if…
Lin Weiye
- 185
- 2
- 13
-1
votes
2 answers
Free Heroku plan and TLS certificate
I know if I upgrade to the Hobby Plan (7$ for month) I can have it automatically.
But is there any way to set TLS certificate on Heroku free plan and how?
I'm use node js
black
- 703
- 2
- 7
- 16