Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make minimum DTLS version configurable #156

Closed
algesten opened this issue Apr 18, 2023 · 4 comments
Closed

Make minimum DTLS version configurable #156

algesten opened this issue Apr 18, 2023 · 4 comments

Comments

@algesten
Copy link
Owner

By default we should disallow DTLS 1.0. To do this we need a PR to land in rust-openssl crate: sfackler/rust-openssl#1886

The man page in openssl: https://www.openssl.org/docs/man3.1/man3/DTLSv1_2_method.html - tells us DTLSv1_2_method is deprecated. The way to limit the DTLS version (or TLS for that matter), is to use SSL_CTX_set_min_proto_version. In the Rust wrapper of openssl this corresponds to https://docs.rs/openssl/0.10.50/openssl/ssl/struct.SslContextBuilder.html#method.set_min_proto_version however SslVersion constant lacks the values we need: https://docs.rs/openssl/0.10.50/openssl/ssl/struct.SslVersion.html

@xnorpx
Copy link
Collaborator

xnorpx commented Jun 15, 2023

@xnorpx
Copy link
Collaborator

xnorpx commented Aug 24, 2023

@algesten could this be closed now?

@algesten
Copy link
Owner Author

It's not configurable yet. We do lock it down however.

@algesten
Copy link
Owner Author

algesten commented Dec 9, 2023

Let's continue this in #326

@algesten algesten closed this as not planned Won't fix, can't repro, duplicate, stale Dec 9, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants