Is X25519/X448 supported for TLSv1.2?

John Jiang john.sha.jiang at gmail.com
Wed Jun 12 07:45:12 UTC 2019


Hi,
Using OpenSSL 1.1.1.
Just want to confirm that if OpenSSL supports curves X25519 and X448 for
TLSv1.2.

Tried below commands,
openssl s_server -trace -state -cert server.cer -key server.key -accept port
openssl s_client -trace -state -CAfile ca.cer -tls1_2 -groups X25519
-connect localhost:port

the server side raised the below error,
140735913575296:error:1417A0C1:SSL
routines:tls_post_process_client_hello:no shared
cipher:ssl/statem/statem_srvr.c:2253:

If using -groups P-256, the handshaking was fine.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20190612/fcaef7bb/attachment.html>


More information about the openssl-users mailing list