[openssl-users] Call for testing TLS 1.3

Dennis Clarke dclarke at blastwave.org
Mon Apr 30 15:48:20 UTC 2018


> Yes, by default only 3 are anbled, but there are also 2 other
> supported included in ALL.

I must have done something wrong here as I see these 3 only :


n0$ LD_LIBRARY_PATH=`pwd`/openssl-1.1.1-pre5_SunOS5.10_sparc64vii+.001 \
 > openssl-1.1.1-pre5_SunOS5.10_sparc64vii+.001/apps/openssl \
 > ciphers -V -s -tls1_3 | \
 > awk '{printf("%8s  %10s  %30s  %12s  %10s  %28s  %s\n", $4, $1, $3, 
$5, $6, $7, $8 )}' | sort
  TLSv1.3   0x13,0x01          TLS_AES_128_GCM_SHA256        Kx=any 
Au=any               Enc=AESGCM(128)  Mac=AEAD
  TLSv1.3   0x13,0x02          TLS_AES_256_GCM_SHA384        Kx=any 
Au=any               Enc=AESGCM(256)  Mac=AEAD
  TLSv1.3   0x13,0x03    TLS_CHACHA20_POLY1305_SHA256        Kx=any 
Au=any    Enc=CHACHA20/POLY1305(256)  Mac=AEAD
n0$

> Note that Apache requires a patch that was commited 4 weeks ago to
> support TLS 1.3. It just seems to make TLS 1.3 known to the ...

I'll look around for that, thank you!

Dennis





More information about the openssl-users mailing list