Does Rserve only supports SSLv2.3?

s-u / Rserve

Fast, flexible and powerful server providing access to R from many languages and systems

http://RForge.net/Rserve

Other

282 stars 65 forks source link

Does Rserve only supports SSLv2.3? #107

Closed 0golovatyi closed 6 years ago

0golovatyi commented 6 years ago

Looking at sources (https://github.com/s-u/Rserve/blob/484f5fedbaa906c9836464eff15dc896b11080f3/src/tls.c#L41 and https://github.com/s-u/Rserve/blob/484f5fedbaa906c9836464eff15dc896b11080f3/src/proxy/tls.c#L41) I discovered server methods set to SSLv2.3. Do I understand it correctly there's no TLS support?

0golovatyi commented 6 years ago

Answering my own question. Apparently SSLv23_server_method() means "the latest available" (which is TLS v1.2 in my case) and not "SSL v2.3".

sirius93 commented 5 years ago

Hi @0golovatyi , I don't know if it is the right thread to ask this. but i was wondering if there is a way to enable TLS1.2 support for Rserve. I am struggling to find a proper way and any help would be much appreciated.

Thanks, Nandan

s-u commented 5 years ago

Rserve supports whichever protocols your openssl provides. If you are missing any protocol support then it's likely because your openssl library is too old. Upgrade your openssl and recompile Rserve.

NimoTh commented 3 years ago

Is that the case also for version 1.7-3? Should TLS1.2 be supported with RServe 1.7-3?

sirius93 commented 3 years ago

I think it should support tls 1.2 See if this might help, Something I put up once I was able to enable it for myself.

https://dev.to/sirius93/how-to-enable-t-l-s-1-2-in-r-serve-4ope