Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support TLS 1.3? #140

Open
driftluo opened this issue Oct 9, 2019 · 6 comments
Open

Support TLS 1.3? #140

driftluo opened this issue Oct 9, 2019 · 6 comments

Comments

@driftluo
Copy link

driftluo commented Oct 9, 2019

I observed that openssl already supports TLS 1.3, security-framework does not support TLS 1.3 and native-tls does not currently support it:
https://github.com/sfackler/rust-openssl/blob/master/openssl/src/ssl/mod.rs#L587
https://github.com/kornelski/rust-security-framework/blob/master/security-framework/src/secure_transport.rs#L383-L419

rust-native-tls/src/lib.rs

Lines 311 to 327 in 7d34900

pub enum Protocol {
/// The SSL 3.0 protocol.
///
/// # Warning
///
/// SSL 3.0 has severe security flaws, and should not be used unless absolutely necessary. If
/// you are not sure if you need to enable this protocol, you should not.
Sslv3,
/// The TLS 1.0 protocol.
Tlsv10,
/// The TLS 1.1 protocol.
Tlsv11,
/// The TLS 1.2 protocol.
Tlsv12,
#[doc(hidden)]
__NonExhaustive,
}

When is this work scheduled to start and finish? has a plan?

@sfackler
Copy link
Owner

sfackler commented Oct 9, 2019

It may be challenging to make sure a proper error is produced if the user sets the min version to 1.3 when using the schannel or security-framework backends that don't even know about that version.

@driftluo
Copy link
Author

driftluo commented Oct 9, 2019

As you might expect, I actually want to lock on tls 1.3, don't support for lower versions.

emmm... it looks like a good idea, but just openssl/libressl/boringssl support it :(

@mehcode
Copy link

mehcode commented Jan 12, 2020

TLS 1.3 is supported on macOS 10.14+ and iOS 12.2+ and since about mid-2019 on Windows 10.

retep998/winapi-rs#859

kornelski/rust-security-framework#93

@jedisct1
Copy link

Now that macOS and Windows have had support for TLS 1.3 for a while, is it something native_tls could allow?

More and more servers are now only accepting TLS 1.3.

@guytbk
Copy link

guytbk commented Dec 28, 2021

Hey, is there any update on these? Is there intention to support tls1.3?

@roguh
Copy link

roguh commented Mar 22, 2023

Also looking for any updates.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

6 participants