Missing support for TLSv1.3

[GRArmstrong]

1. Operating System: Windows 10 x64 (20H2)
2. Transmission Deamon: 3.00 (0) on TrueNAS Core, FreeBSD 12.2-RELEASE-p3
3. Transmission Remote GUI: Windows x86_64 portable, Windows x64, and Windows x86 installations, v5.18.0

Also pertinent, reverse proxy: nginx/1.18.0

Hello,

I have an issue with my current setup: I'm using nginx as a reverse-proxy for my Transmission instance which seems to work fine in the browser (Firefox 86), however when I installed transgui and attempted to connect I received this error:

SSL23_GET_SERVER_HELLO:tlsv1 alert protocol version

I managed to connect succesfully after changing the ssl_protocols config option in Nginx from TLSv1.3 to TLSv1.2.

I'm unsure if this is an OpenSSL issue or an Nginx issue, or I might have made a mistake in my Nginx configuration but I do suspect it's a client issue.

With thanks,
Graham

[lighterowl]

tl;dr : TLS 1.3 is not supported by the application.

HTTPS support is provided by the Ararat Synapse library. The last stable release was in April 2012, and last commits in August 2018. I wouldn't hold my breath to see TLS 1.3 implemented upstream.

This project has its own copy of the library in the synapse directory. This file seems to be a good place to start looking if there's anyone willing to go ahead with the implementation. Realistically, a build with OpenSSL 1.1.1 should be attempted first, since it's the first OpenSSL version to support TLS 1.3.

[ElDavoo]

Commeting to subscribe

[g0blin-NN]

https://www.openssl.org/blog/blog/2021/09/07/OpenSSL3.Final/

transgui rip?

[lighterowl]

https://www.openssl.org/blog/blog/2021/09/07/OpenSSL3.Final/

transgui rip?

Why? It's not like 1.x is going anywhere.

[g0blin-NN]

Why? It's not like 1.x is going anywhere.

https://github.com/transmission-remote-gui/transgui/releases/download/v5.18.0/transgui-5.18.0-x86_64-win64.zip

[nononymousse]

what about changing the library ?
(maybe it's a dumb question, i'm not a dev)

[g0blin-NN]

@nono723, there is an option. transgui-5.18.0-i386-win32.zip + OpenSSL 1.0.2zb VC9 (nasm 2.13.03) x86.zip
works good.

[lighterowl]

If you still need TLS 1.3 support, my fork switched to OpenSSL 3 as the Synapse library has been updated by the author in the meantime to support newer OpenSSL versions. The provided releases include packaged OpenSSL libraries.