Re: [openSSL] How to get successful connection

Andrew Dinh <andrewd@xxxxxxxxxxx> · Tue, 3 Dec 2024 03:16:25 -0800 (PST)

Using TLS 1.0 is insecure and not recommended. However, if you do need this functionality, please take a look at this documentation, particularly under SECURE RENEGOTIATION: https://docs.openssl.org/master/man3/SSL_CTX_set_options/

On Sunday, November 24, 2024 at 11:41:39 PM UTC-8 Keonho Lee wrote:

Hello All,

I have an issue about TLS handshaking.

I'm using OpenSSL 3.0.10 1 Aug 2023.

[Scenarios]

1. Client sends 'Client hello' with Version TLS1.2.

Version: TLS 1.2 (0x0303)

2. Server responds 'Server hello' with Version TLS1.0.

Version: TLS 1.0 (0x0301)

3. Client act with 'fatal' like below.

Transport Layer Security

    TLSv1 Record Layer: Alert (Level: Fatal, Description: Protocol Version)

        Content Type: Alert (21)

        Version: TLS 1.2 (0x0303)

        Length: 2

        Alert Message

            Level: Fatal (2)

            Description: Protocol Version (70)

I already set minimum TLS version to TLS1.0 with SSL_CTX_set_min_proto_version.

How could I get success in this situation?

Do I have misconfiguration?

BR,

KH.Lee.

Keonho Lee

Sr. SW Engineer, R&D Dept.
+82 2 368 4686

+82 10 3437 4972

This electronic message, including attachments, is intended only for the use of the individual or company named above or to which
 it is addressed.

The information contained in this message shall be considered confidential and proprietary, and may include confidential work product.
 If you are not the intended recipient, please be aware that any unauthorized use, dissemination, distribution or copying of this message is strictly prohibited. If you have received this email in error, please notify the sender by replying to this message
 and deleting this email immediately. 

To the extent
 this email includes an offer to buy Telit Cinterion products or an order confirmation, the offer or order confirmation is governed by Telit Cinterion’s General Terms and Conditions of Sale, which are published
here.

You can refer
 to our Privacy Policy to
 see how Telit Cinterion protects your personal information.

-- 

You received this message because you are subscribed to the Google Groups "openssl-users" group.

To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe@xxxxxxxxxxx.

To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/bb260d49-cf29-461c-b247-28152bd1b4f9n%40openssl.org.


Keonho Lee Sr. SW Engineer, R&D Dept. +82 2 368 4686 +82 10 3437 4972



This electronic message, including attachments, is intended only for the use of the individual or company named above or to which it is addressed. The information contained in this message shall be considered confidential and proprietary, and may include confidential work product. If you are not the intended recipient, please be aware that any unauthorized use, dissemination, distribution or copying of this message is strictly prohibited. If you have received this email in error, please notify the sender by replying to this message and deleting this email immediately. To the extent this email includes an offer to buy Telit Cinterion products or an order confirmation, the offer or order confirmation is governed by Telit Cinterion’s General Terms and Conditions of Sale, which are published here. You can refer to our Privacy Policy to see how Telit Cinterion protects your personal information.