Skip to content

TLS1.2 handshake completely broken using openssl-1.1.1 compiled with enable_tls13 if cipher list don't include tls-1.3 supported cipher. #5065

@EmericBr

Description

@EmericBr

You should consider to fall back on lower protocol version if the cipher list dos not contain mandatory ciphers for tls1.3 (with a warning).

Currently a a user upgrading to openssl-1.1.1 with enable tls1.3 compiled shows all his handshakes broken if he configured a cipher list compliant with tls1.2 but not tls1.3. Even if the clients supports only TLS 1.2

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions