fast_tls icon indicating copy to clipboard operation
fast_tls copied to clipboard

TLS 1.3 support

Open StephenWall opened this issue 2 years ago • 0 comments

While OpenSSL 3 is now supported, there is no mechanism provided for setting which ciphers to use for TLS 1.3. OpenSSL sets these separately (via SSL_CTX_set_ciphersuites()) than for TLS 1.2 and lower (SSL_CTX_set_cipher_list()). See https://www.openssl.org/docs/manmaster/man3/SSL_CTX_set_ciphersuites.html

Most applications I've encountered introduced a new keyword for TLS 1.3 ciphers, but at least one just has you include them in the existing keyword, and it separates them itself. Either is viable.

StephenWall avatar Jan 30 '24 16:01 StephenWall