<div dir="ltr">Gentle Reminder</div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, 4 Jan 2023 at 09:05, Anshu Agarwal <<a href="mailto:anshu0905@gmail.com">anshu0905@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><p class="MsoNormal" style="margin:0cm;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:10.5pt;font-family:-apple-system;color:rgb(36,41,47)">Hi,</span></p>

<p class="MsoNormal" style="margin:0cm;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:10.5pt;font-family:-apple-system;color:rgb(36,41,47)"> </span></p>

<p class="MsoNormal" style="margin:0cm;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:10.5pt;font-family:-apple-system;color:rgb(36,41,47)">We are using Openssl 1.1.1k where TLS
handshake is failing for servers having self-signed certificates which are not
signed by trusted root CA.</span></p>

<p class="MsoNormal" style="margin:0cm;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:10.5pt;font-family:-apple-system;color:rgb(36,41,47)">Can you please let us know if it’s
the expected behaviour? Do we have a configure setting to allow untrusted
self-signed certificates? </span></p>

<p class="MsoNormal" style="margin:0cm;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:10.5pt;font-family:-apple-system;color:rgb(36,41,47)">What is the security risk associated
in establishing a TLS session with the servers having un-trusted self-signed
certificates.</span></p>

<p class="MsoNormal" style="margin:0cm;font-size:11pt;font-family:Calibri,sans-serif"> </p><p class="MsoNormal" style="margin:0cm;font-size:11pt;font-family:Calibri,sans-serif">Note: TLS handshake was successful <span style="color:rgb(36,41,47);font-family:-apple-system;font-size:14px">for servers having self-signed certificates which are not signed by trusted root CA with OpenSSL 1.0.2f.</span></p><p class="MsoNormal" style="margin:0cm;font-size:11pt;font-family:Calibri,sans-serif"><span style="color:rgb(36,41,47);font-family:-apple-system;font-size:14px"><br></span></p><p class="MsoNormal" style="margin:0cm;font-size:11pt;font-family:Calibri,sans-serif"><span style="color:rgb(36,41,47);font-family:-apple-system;font-size:14px">Appreciate your support here.</span></p><p class="MsoNormal" style="margin:0cm;font-size:11pt;font-family:Calibri,sans-serif"><span style="color:rgb(36,41,47);font-family:-apple-system;font-size:14px"><br></span></p>

<p class="MsoNormal" style="margin:0cm;font-size:11pt;font-family:Calibri,sans-serif">Thanks & Regards,</p>

<p class="MsoNormal" style="margin:0cm;font-size:11pt;font-family:Calibri,sans-serif">Anshu</p></div>
</blockquote></div>