processone / fast_tls

TLS / SSL OpenSSL-based native driver for Erlang / Elixir
https://www.ejabberd.im
Other
83 stars 37 forks source link

TLS 1.3 support #64

Open StephenWall opened 7 months ago

StephenWall commented 7 months ago

While OpenSSL 3 is now supported, there is no mechanism provided for setting which ciphers to use for TLS 1.3. OpenSSL sets these separately (via SSL_CTX_set_ciphersuites()) than for TLS 1.2 and lower (SSL_CTX_set_cipher_list()). See https://www.openssl.org/docs/manmaster/man3/SSL_CTX_set_ciphersuites.html

Most applications I've encountered introduced a new keyword for TLS 1.3 ciphers, but at least one just has you include them in the existing keyword, and it separates them itself. Either is viable.