[edk2-devel] CryptoPkg OpensslLib TLSv1.3 support

[edk2-devel] CryptoPkg OpensslLib TLSv1.3 support

[eddie wang]

[-- Attachment #1: Type: text/plain, Size: 573 bytes --]

Hi all,
I have a question about the OpenSSL library in CryptoPkg. Does tlsv1.3 support exist in the current OpensslLib? If not, is there a way to make TLSV1.3 support possible?
Many thanks.

BR,
Eddie


-=-=-=-=-=-=-=-=-=-=-=-
Groups.io Links: You receive all messages sent to this group.
View/Reply Online (#119096): https://edk2.groups.io/g/devel/message/119096
Mute This Topic: https://groups.io/mt/106217831/7686176
Group Owner: devel+owner@edk2.groups.io
Unsubscribe: https://edk2.groups.io/g/devel/unsub [rebecca@openfw.io]
-=-=-=-=-=-=-=-=-=-=-=-



[-- Attachment #2: Type: text/html, Size: 1011 bytes --]

Re: [edk2-devel] CryptoPkg OpensslLib TLSv1.3 support

[Li, Yi]

[-- Attachment #1: Type: text/plain, Size: 1108 bytes --]

No, Tls1.3 is not supported yet: https://github.com/tianocore/edk2/blob/7142e648416ff5d3eac6c6d607874805f5de0ca8/CryptoPkg/Library/OpensslLib/OpensslGen/include/openssl/configuration-ec.h#L271-L273

We have a BZ to track it but afaik no dedicated folk working on it.
https://bugzilla.tianocore.org/show_bug.cgi?id=2424

Regards,
Yi

From: devel@edk2.groups.io <devel@edk2.groups.io> On Behalf Of eddie wang
Sent: Tuesday, May 21, 2024 11:39 AM
To: devel@edk2.groups.io
Subject: [edk2-devel] CryptoPkg OpensslLib TLSv1.3 support

Hi all,
I have a question about the OpenSSL library in CryptoPkg. Does tlsv1.3 support exist in the current OpensslLib? If not, is there a way to make TLSV1.3 support possible?
Many thanks.

BR,
Eddie



-=-=-=-=-=-=-=-=-=-=-=-
Groups.io Links: You receive all messages sent to this group.
View/Reply Online (#119097): https://edk2.groups.io/g/devel/message/119097
Mute This Topic: https://groups.io/mt/106217831/7686176
Group Owner: devel+owner@edk2.groups.io
Unsubscribe: https://edk2.groups.io/g/devel/unsub [rebecca@openfw.io]
-=-=-=-=-=-=-=-=-=-=-=-



[-- Attachment #2: Type: text/html, Size: 4174 bytes --]

Re: [edk2-devel] CryptoPkg OpensslLib TLSv1.3 support

[Li, Walon]

[-- Attachment #1: Type: text/plain, Size: 615 bytes --]

Hi Li, Yi

I sent a TLS1.3 patch to BZ that the change is simple. Do you have plan to merge/verify it in edk2?
This patch was verified on QEMU. The https server is apache2 which allowed TLS_AES_128_GCM_SHA256 ciphersuite only.

Thanks,
Walon


-=-=-=-=-=-=-=-=-=-=-=-
Groups.io Links: You receive all messages sent to this group.
View/Reply Online (#119290): https://edk2.groups.io/g/devel/message/119290
Mute This Topic: https://groups.io/mt/106217831/7686176
Group Owner: devel+owner@edk2.groups.io
Unsubscribe: https://edk2.groups.io/g/devel/unsub [rebecca@openfw.io]
-=-=-=-=-=-=-=-=-=-=-=-



[-- Attachment #2: Type: text/html, Size: 1051 bytes --]