[openssl-users] Call for testing TLS 1.3

Dennis Clarke dclarke at blastwave.org
Mon Apr 30 19:36:15 UTC 2018


On 30/04/18 03:01 PM, Salz, Rich via openssl-users wrote:
> Sorry, typo.  We've had hundreds of millions of connections, with megabytes of data exchanged."
> 

The issue is most likely that no one "in the wild" has done any testing 
of significance.

I can certainly see tls1.2 exchange but there is nothing for tls1.3 and
so I am working on getting a site up pronto ( in the wild ) to test.

thus :

subject=CN = www.openssl.org

issuer=C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 3136 bytes and written 344 bytes
Verification: OK
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
     Protocol  : TLSv1.2
     Cipher    : ECDHE-RSA-AES256-GCM-SHA384
etc etc etc

However tls1_3 results in .. not much, yet.


Dennis


More information about the openssl-users mailing list