search

iLya2IK / wchttpserver

HTTP/2+HTTP/1.1+WebSocket server written with Lazarus (Free Pascal)
GNU Lesser General Public License v2.1
57 stars 18 forks source link

TLS1.3 #3

Closed datiscum closed 3 years ago

datiscum commented 3 years ago

I tested the sample server and it worked without any problems. However, the connection in Firefox only used "TLSv1.2" as specified with "Application.ESServer.SSLType:= stTLSv1_2". If I specify it with "Application.ESServer.SSLType:= stAny", TLSv1.3 is automatically used. Is there a reason why you are specifying "TLSv1.2" ?

I use OpenSSL1.1.1.

Many thanks

iLya2IK commented 3 years ago

Thanks for your comment. I just did not test the server with TLS ver 1.3 for operability. But I think that there should be no problems when switching to a new version. Note that in order to fully use TLS 1.3, you need to update the list of Cipher suites: https://wiki.mozilla.org/Security/Server_Side_TLS Look at OpenSSL.SSLCipherList in server.cfg