Re: [openSSL] How to get successful connection

Hi,

Thanks for the info.
I will review it.

BR,
KH.Lee.



[Signature_New]



Telit Wireless Solutions Co., Ltd.

12th Fl.,Shinyoung Securities Bld.,

34-12 Yeouido-dong, Yeongdeungpo-gu,

Seoul 150-716,KOREA

TEL: +82-2-368-4686

FAX: +82-2-368-4606

[email protected]<mailto:[email protected]>

________________________________
보낸 사람: Andrew Dinh <[email protected]>
보낸 날짜: 2024년 12월 3일 화요일 오후 8:16
받는 사람: openssl-users <[email protected]>
참조: Keonho Lee <[email protected]>
제목: Re: [openSSL] How to get successful connection

You don't often get email from [email protected] Learn why this is important<https://aka.ms/LearnAboutSenderIdentification>

CAUTION:External sender. Report and Do not click unexpected links or attachments


Using TLS 1.0 is insecure and not recommended. However, if you do need this functionality, please take a look at this documentation, particularly under SECURE RENEGOTIATION: https://docs.openssl.org/master/man3/SSL_CTX_set_options/

On Sunday, November 24, 2024 at 11:41:39 PM UTC-8 Keonho Lee wrote:
Hello All,

I have an issue about TLS handshaking.
I'm using OpenSSL 3.0.10 1 Aug 2023.

[Scenarios]
1. Client sends 'Client hello' with Version TLS1.2.
Version: TLS 1.2 (0x0303)

2. Server responds 'Server hello' with Version TLS1.0.
Version: TLS 1.0 (0x0301)

3. Client act with 'fatal' like below.
Transport Layer Security
    TLSv1 Record Layer: Alert (Level: Fatal, Description: Protocol Version)
        Content Type: Alert (21)
        Version: TLS 1.2 (0x0303)
        Length: 2
        Alert Message
            Level: Fatal (2)
            Description: Protocol Version (70)


I already set minimum TLS version to TLS1.0 with SSL_CTX_set_min_proto_version.
How could I get success in this situation?
Do I have misconfiguration?


BR,
KH.Lee.


Keonho Lee
Sr. SW Engineer, R&D Dept.

+82 2 368 4686<tel:+82%202-368-4686>
+82 10 3437 4972<tel:+82%2010-3437-4972>

 [https://ci4.googleusercontent.com/proxy/rGAlRTlWm0WG9_jtkrFgdacqfA45k_ErRgBIRIl4FioYp5NIcxTKhrWMyQ9LNfXUAWATZ5DxTJO2vw=s0-d-e1-ft#https://www2.telit.com/icons/sigtcp.png]







This electronic message, including attachments, is intended only for the use of the individual or company named above or to which it is addressed.
The information contained in this message shall be considered confidential and proprietary, and may include confidential work product. If you are not the intended recipient, please be aware that any unauthorized use, dissemination, distribution or copying of this message is strictly prohibited. If you have received this email in error, please notify the sender by replying to this message and deleting this email immediately.

To the extent this email includes an offer to buy Telit Cinterion products or an order confirmation, the offer or order confirmation is governed by Telit Cinterion’s General Terms and Conditions of Sale, which are published here<https://www.telit.com/hardware-terms-conditions/>.

You can refer to our Privacy Policy<https://telit.com/privacy-policy/> to see how Telit Cinterion protects your personal information.



Keonho Lee
Sr. SW Engineer, R&D Dept.

+82 2 368 4686
+82 10 3437 4972

 [https://www2.telit.com/icons/sigtcp.png]







This electronic message, including attachments, is intended only for the use of the individual or company named above or to which it is addressed.
The information contained in this message shall be considered confidential and proprietary, and may include confidential work product. If you are not the intended recipient, please be aware that any unauthorized use, dissemination, distribution or copying of this message is strictly prohibited. If you have received this email in error, please notify the sender by replying to this message and deleting this email immediately.

To the extent this email includes an offer to buy Telit Cinterion products or an order confirmation, the offer or order confirmation is governed by Telit Cinterion’s General Terms and Conditions of Sale, which are published here<https://www.telit.com/hardware-terms-conditions/>.

You can refer to our Privacy Policy<https://telit.com/privacy-policy/> to see how Telit Cinterion protects your personal information.

-- 
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/PAXPR06MB840535E407EBE43CB9DB318C9F372%40PAXPR06MB8405.eurprd06.prod.outlook.com.