Hi,
Thanks for the info.
I will review it.
BR,
KH.Lee.
Telit Wireless Solutions Co., Ltd.
12th Fl.,Shinyoung Securities Bld.,
34-12 Yeouido-dong, Yeongdeungpo-gu,
Seoul 150-716,KOREA
TEL: +82-2-368-4686
FAX: +82-2-368-4606
keonho.lee@xxxxxxxxx
보낸 사람: Andrew Dinh <andrewd@xxxxxxxxxxx>
보낸 날짜: 2024년 12월 3일 화요일 오후 8:16
받는 사람: openssl-users <openssl-users@xxxxxxxxxxx>
참조: Keonho Lee <Keonho.Lee@xxxxxxxxx>
제목: Re: [openSSL] How to get successful connection
CAUTION:External sender. Report and Do not click unexpected links or attachments
Using TLS 1.0 is insecure and not recommended. However, if you do need this functionality, please take a look at this documentation, particularly under SECURE RENEGOTIATION: https://docs.openssl.org/master/man3/SSL_CTX_set_options/
On Sunday, November 24, 2024 at 11:41:39 PM UTC-8 Keonho Lee wrote:
Hello All,
I have an issue about TLS handshaking.
I'm using OpenSSL 3.0.10 1 Aug 2023.
[Scenarios]
1. Client sends 'Client hello' with Version TLS1.2.
Version: TLS 1.2 (0x0303)
2. Server responds 'Server hello' with Version TLS1.0.
Version: TLS 1.0 (0x0301)
3. Client act with 'fatal' like below.
Transport Layer Security
TLSv1 Record Layer: Alert (Level: Fatal, Description: Protocol Version)
Content Type: Alert (21)
Version: TLS 1.2 (0x0303)
Length: 2
Alert Message
Level: Fatal (2)
Description: Protocol Version (70)
I already set minimum TLS version to TLS1.0 with SSL_CTX_set_min_proto_version.
How could I get success in this situation?
Do I have misconfiguration?
BR,
KH.Lee.
|
Keonho Lee
Sr. SW Engineer, R&D Dept.
+82 2 368 4686
+82 10 3437 4972
|
|
|
|
|
This electronic message, including attachments, is intended only for the use of the individual or company named above or to which it is addressed.
The information contained in this message shall be considered confidential and proprietary, and may include confidential work product. If you are not the intended recipient, please
be aware that any unauthorized use, dissemination, distribution or copying of this message is strictly prohibited. If you have received this email in error, please notify the sender by replying to this message and deleting this email immediately.
To the extent this email includes an offer to buy Telit Cinterion products or an order confirmation, the
offer or order confirmation is governed by Telit Cinterion’s General Terms and Conditions of Sale, which are published
here.
You can refer to our
Privacy
Policy to see how Telit Cinterion protects your personal information.
|
|
Keonho Lee
Sr. SW Engineer, R&D Dept.
+82 2 368 4686
+82 10 3437 4972
|
|
|
|
|
This electronic message, including attachments, is intended only for the use of the individual or company named above or to which
it is addressed.
The information contained in this message shall be considered confidential and proprietary, and may include confidential work product.
If you are not the intended recipient, please be aware that any unauthorized use, dissemination, distribution or copying of this message is strictly prohibited. If you have received this email in error, please notify the sender by replying to this message
and deleting this email immediately.
To the extent
this email includes an offer to buy Telit Cinterion products or an order confirmation, the offer or order confirmation is governed by Telit Cinterion’s General Terms and Conditions of Sale, which are published
here.
You can refer
to our Privacy Policy to
see how Telit Cinterion protects your personal information.
|
--
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe@xxxxxxxxxxx.
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/PAXPR06MB840535E407EBE43CB9DB318C9F372%40PAXPR06MB8405.eurprd06.prod.outlook.com.
|