TLS 1.3 (General questions)

by dirk@woodstone.nu, (1365 days ago)

Hi,


Any updates on when TLS 1.3 will be added to the components (mostly thinking about the httpDLX component).

dirk.

locked

TLS 1.3

by dirk@woodstone.nu, (1365 days ago) @ dirk@woodstone.nu

The more I read about it, it seems that the current 1.x.y versions of OpenSSL (and that is the SSL libs you guys are using) is OR compliant for FIPS OR supporting TLS 1.3
For a combination of both (and from what I read you do want that FIPS support) you should migrate (and wait) for openSSL 3.x (or using another SSL libs).

What are the plans concerning the support of TLS 1.3 (and I suppose FIPS)?

locked

TLS 1.3

by Jasmine, (1365 days ago) @ dirk@woodstone.nu

Dirk,

you are correct, we're waiting for both FIPS and TLS1.3 to be available.

Jasmine

locked

TLS 1.3

by dirk@woodstone.nu, (1365 days ago) @ Jasmine

Dirk,

you are correct, we're waiting for both FIPS and TLS1.3 to be available.

Jasmine

Does this mean that you are waiting for OpenSSL 3? And based on https://keypair.us/2021/05/openssl-3-0-fips-timeline/ the FIPS certification landing would only be in Q2/Q3 2022???

locked