Re: CHACHA20-POLY1305 Server Preference NOK with tlsv1.3

2020-05-04 Thread Maxim Dounin
Hello! On Mon, May 04, 2020 at 08:10:38PM +0200, Vincent Blondel wrote: > I just copy/pasted/replaced the content of my openssl.conf with the > proposal in this mail ... still OK with tslv1.2 and NOK with tlsv1.3 ... > > openssl is up to date and seems working fine ... Some things to consider:

Re: CHACHA20-POLY1305 Server Preference NOK with tlsv1.3

2020-05-04 Thread Vincent Blondel
I just copy/pasted/replaced the content of my openssl.conf with the proposal in this mail ... still OK with tslv1.2 and NOK with tlsv1.3 ... openssl is up to date and seems working fine ... $ openssl version OpenSSL 1.1.1f 31 Mar 2020 $ openssl ciphers -v TLS_AES_256_GCM_SHA384 TLSv1.3 Kx=any

Re: CHACHA20-POLY1305 Server Preference NOK with tlsv1.3

2020-05-04 Thread Maxim Dounin
Hello! On Mon, May 04, 2020 at 07:49:26AM +0200, Vincent Blondel wrote: > thanks for the update Maxim but unfortunately still nok ... > > my openssl.conf > > [default_conf] > ssl_conf = ssl_sect > [ssl_sect] > system_default = system_default_sect > [system_default_sect] > Options = ServerPrefer

Re: CHACHA20-POLY1305 Server Preference NOK with tlsv1.3

2020-05-03 Thread Vincent Blondel
thanks for the update Maxim but unfortunately still nok ... my openssl.conf [default_conf] ssl_conf = ssl_sect [ssl_sect] system_default = system_default_sect [system_default_sect] Options = ServerPreference,PrioritizeChaCha [req] distinguished_name = req_distinguished_name req_extensions = v3_re

Re: CHACHA20-POLY1305 Server Preference NOK with tlsv1.3

2020-05-03 Thread Maxim Dounin
Hello! On Sun, May 03, 2020 at 07:04:49PM +0200, Vincent Blondel wrote: > Hello, > > Trying to get CHACHA20-POLY1305 Server Preference ... Working with tlsv1.2 > but NOK with tlsv1.3 > > ** Tried with a Custom OpenSSL.conf ServerPreference,PrioritizeChaCha > > OPENSSL_CONF=$HOME/conf/openssl.c

CHACHA20-POLY1305 Server Preference NOK with tlsv1.3

2020-05-03 Thread Vincent Blondel
Hello, Trying to get CHACHA20-POLY1305 Server Preference ... Working with tlsv1.2 but NOK with tlsv1.3 ** Tried with a Custom OpenSSL.conf ServerPreference,PrioritizeChaCha OPENSSL_CONF=$HOME/conf/openssl.conf $HOME/bin/nginx.exe [default_conf] ssl_conf = ssl_sect [ssl_sect] system_default = sy