Stack Overflow
Stack Overflow

Questions tagged [tls1.3]

TLS (Transport Layer Security) version 1.3 is a security protocol. It is an upgrade of TLS version 1.2, and provides improvements in speed, efficiency, security and privacy.

374 questions
3
votes
1 answer

SSLContext.getInstance("TLS") vulnerability

We get the call SSLContext.getInstance("TLS") reported as vulnerability. The recommended fix is to use SSLContext.getInstance("TLSv1.2"). I learnt that TLSv1.1 and TLSv1 are disabled anyway since April 2021 in Java implementations, but when I…
Andreas Mueller
  • 201
  • 4
  • 13
3
votes
1 answer

Wireshark/QUIC - Cannot decrypt QUIC

I'm trying to view the payload of QUIC packets although, with no luck. I can decrypt fine TLS packets using SSLLOGFILE file that generated by the browser and load it to Wireshark, I can see HTTPS and DoH and almost all TLS encrypted packets are…
Neyney10
  • 33
  • 5
3
votes
1 answer

.NET 4.8 TLS 1.3 Issue on Windows 10

A .NET 4.8 application running on Windows 10 (version 10.0.19041) with enabled TLS 1.3 using the registry as per how to enable TLS 1.3 in windows 10 However running the following code: try { …
Rick Sanchez
  • 78
  • 1
  • 2
  • 7
3
votes
1 answer

Python pyOpenssl server doesn't negotiate TLS 1.3

I'm having hard time with pyOpenssl server to negotiate TLS 1.3. I used openssl s_client(1.3 supported) to connect to the server with no luck. However the server works with version TLS 1.2 and below. Could you please help what am I missing? Thanks…
Pr1614
  • 61
  • 1
  • 6
3
votes
1 answer

Is it possible to Make HTTP/2 requests with Apache HTTPClient 4.2.5?

I'm trying to make an HTTP/2 request with apache client. Is it possible with the below versions? migrating the versions in my web application cost me heavy code changes. Is there any workaround to support HTTP/2 with TLSv1.3 in…
Rajeshwaran R
  • 35
  • 1
  • 5
3
votes
0 answers

How to use TLSv1.3 with nodejs 10.x

I was trying to make an external api call using https and got the following error. Error: Client network socket disconnected before secure TLS connection was established at TLSSocket.onConnectEnd (_tls_wrap.js:1092:19) at Object.onceWrapper…
Shadab Khan
  • 31
  • 1
  • 6
3
votes
1 answer

Apache reporting "Illegal protocol" when using TLSv1.3 with OpenSSL 1.1.1b installed

I'm trying to test TLSv1.3 support and Apache is failing to start with the following output from systemctl status httpd... systemd[1]: Starting The Apache HTTP Server... httpd[6001]: AH00526: Syntax error on line 100 of…
oucil
  • 4,211
  • 2
  • 37
  • 53
2
votes
1 answer

AttributeError: module 'ssl' has no attribute 'PROTOCOL_TLSv1_3'

I am trying to setup a tls context in python. I want to force TLSv1.3 usng: context = ssl.SSLContext(ssl.PROTOCOL_TLSv1_3) This does not work as I receive the following error: AttributeError: module 'ssl' has no attribute 'PROTOCOL_TLSv1_3' I am…
SilverTear
  • 695
  • 7
  • 18
2
votes
0 answers

Minimal Elixir SSL listener working on MacOS but not on Debian

I appreciate this question appears highly similar to another I asked recently. However, while the solution there works on MacOS, on Debian I am getting different errors, and a different set of problems. After a fresh install with sudo apt-get…
Freddie Woodruff
  • 111
  • 5
2
votes
1 answer

Simple SSL server-client connection in Elixir

I'm working on a toy networking project and I want to add a TLS layer between the server and the client. I'm getting handshake errors that I'm trying to figure out how to debug. The TL;DR is probably: 'what arguments do I pass to :ssl.listen/2' but…
Freddie Woodruff
  • 111
  • 5
2
votes
1 answer

How do I configure PostgreSQL's pg_hba.conf to allow connections with a verified certificate but to reject them (incl. localhost) if they don't?

I've set up PostgreSQL (v.15) server on my local machine using the PostgreSQL Binaries. And I've generated certificates using this link. I've stored the certificates in c:/certs and have also copied them to the data folder of my local PostgreSQL…
HasQuestionsAndAnswers
  • 75
  • 8
2
votes
0 answers

Why does sending zero bytes via openssl `s_client` send a 19 byte payload?

I'm playing around with openssl s_client and I tried sending various payloads with/without padding and analysing the stack trace output. One case I don't understand is when I send empty bytes without padding I see the following output: New, TLSv1.3,…
Kiwi breeder
  • 459
  • 4
  • 11
2
votes
0 answers

is it possible to use TLS 1.3 for .net 4.7.2

I have asp.net webform application with .net 4.7.2 is there any possibility to enable tls 1.3 in my application. I have tried this https://www.medo64.com/2020/05/using-tls-1-3-from-net-4-0-application/
alen george
  • 41
  • 2
2
votes
0 answers

Can I change client certificate in the browser without a restart?

I am working on using client-side certificates MTLS certificates in FireFox/Chrome and that works fine. But, is there any way I can get the client certificate selector to open so that I can change the client certificate without having to restart the…
Joe Markov
  • 221
  • 1
  • 10
2
votes
1 answer

TLSv1.3 - java.io.EOFException: SSL peer shut down incorrectly

I am trying to connect to a response from a external site at java.lang.Thread.run(Thread.java:748) Caused by: java.io.EOFException: SSL peer shut down incorrectly at sun.security.ssl.InputRecord.read(InputRecord.java:505) at…
Nidheesh
  • 4,390
  • 29
  • 87
  • 150
1 2
3
…
24 25