Re: [openSSL] How to get successful connection

Using TLS 1.0 is insecure and not recommended. However, if you do need this 
functionality, please take a look at this documentation, particularly under 
SECURE 
RENEGOTIATION: https://docs.openssl.org/master/man3/SSL_CTX_set_options/

On Sunday, November 24, 2024 at 11:41:39 PM UTC-8 Keonho Lee wrote:

> Hello All,
>
> I have an issue about TLS handshaking.
> I'm using OpenSSL 3.0.10 1 Aug 2023.
>
> [Scenarios]
> 1. Client sends 'Client hello' with Version TLS1.2.
> Version: TLS 1.2 (0x0303)
>
> 2. Server responds 'Server hello' with Version TLS1.0.
> Version: TLS 1.0 (0x0301)
>
> 3. Client act with 'fatal' like below.
> Transport Layer Security
>     TLSv1 Record Layer: Alert (Level: Fatal, Description: Protocol Version)
>         Content Type: Alert (21)
>         Version: TLS 1.2 (0x0303)
>         Length: 2
>         Alert Message
>             Level: Fatal (2)
>             Description: Protocol Version (70)
>
>
> I already set minimum TLS version to TLS1.0 with 
> SSL_CTX_set_min_proto_version.
> How could I get success in this situation?
> Do I have misconfiguration?
>
>
> BR,
> KH.Lee.
>   
>
> *Keonho Lee*
> Sr. SW Engineer, R&D Dept.
>
> +82 2 368 4686 <+82%202-368-4686>
> +82 10 3437 4972 <+82%2010-3437-4972>
>   
>
>  
>
>  
>
>  
>
> This electronic message, including attachments, is intended only for the 
> use of the individual or company named above or to which it is addressed.
> The information contained in this message shall be considered confidential 
> and proprietary, and may include confidential work product. If you are not 
> the intended recipient, please be aware that any unauthorized use, 
> dissemination, distribution or copying of this message is strictly 
> prohibited. If you have received this email in error, please notify the 
> sender by replying to this message and deleting this email immediately. 
>
> To the extent this email includes an offer to buy Telit Cinterion products 
> or an order confirmation, the offer or order confirmation is governed by 
> Telit Cinterion’s General Terms and Conditions of Sale, which are published 
> here <https://www.telit.com/hardware-terms-conditions/>.
>
> You can refer to our Privacy Policy <https://telit.com/privacy-policy/> to 
> see how Telit Cinterion protects your personal information.
>

-- 
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/bb260d49-cf29-461c-b247-28152bd1b4f9n%40openssl.org.