TLS 1.3 - WeOnlyDo Discussion board

TLS 1.3 (General questions)

by dirk@woodstone.nu, Thursday, August 05, 2021, 09:05 (1204 days ago)

Hi,


Any updates on when TLS 1.3 will be added to the components (mostly thinking about the httpDLX component).

dirk.

TLS 1.3

by dirk@woodstone.nu, Thursday, August 05, 2021, 09:16 (1204 days ago) @ dirk@woodstone.nu

The more I read about it, it seems that the current 1.x.y versions of OpenSSL (and that is the SSL libs you guys are using) is OR compliant for FIPS OR supporting TLS 1.3
For a combination of both (and from what I read you do want that FIPS support) you should migrate (and wait) for openSSL 3.x (or using another SSL libs).

What are the plans concerning the support of TLS 1.3 (and I suppose FIPS)?

TLS 1.3

by wodSupport, Thursday, August 05, 2021, 09:48 (1204 days ago) @ dirk@woodstone.nu

Dirk,

you are correct, we're waiting for both FIPS and TLS1.3 to be available.

Jasmine

TLS 1.3

by dirk@woodstone.nu, Thursday, August 05, 2021, 09:54 (1204 days ago) @ wodSupport

Dirk,

you are correct, we're waiting for both FIPS and TLS1.3 to be available.

Jasmine

Does this mean that you are waiting for OpenSSL 3? And based on https://keypair.us/2021/05/openssl-3-0-fips-timeline/ the FIPS certification landing would only be in Q2/Q3 2022???