i would not call it an "issue" (this has often a connotation of a flaw),
but it is not supported yet in the version you are using. You need probably
OpenSSL 1.1.1 or newer.


You can check as well


   ciphers -v | grep TLSv1.3


to see the proper Cipher Suite Names (IANA) usable for e.g. TLSv1.3

-gn

On 23.03.20 18:08, Brian Fenton wrote:
Hi Gustaf

Ah this is an OpenSSL issue, not Naviserver. No, those ciphers are not listed when I type openssl list -cipher-algorithms

This is on Windows 2012 Server and OpenSSL version is
*OpenSSL 1.1.0e  16 Feb 2017*

thanks
Brian

------------------------------------------------------------------------
*From:* Gustaf Neumann <neum...@wu.ac.at>
*Sent:* Monday 23 March 2020 17:02
*To:* naviserver-devel@lists.sourceforge.net <naviserver-devel@lists.sourceforge.net>
*Subject:* Re: [naviserver-devel] nsssl: error loading ciphers

        

This message's attachments contains at least one web link. This is often used for phishing attempts. Please only interact with this attachment if you know its source and that the content is safe. If in doubt, confirm the legitimacy with the sender by phone.


Dear Brian,

What version of OpenSSL are you using on what OS?
Are these ciphers available in this OpenSSL implementation?

     openssl list -cipher-algorithms
It might be possible, that the same version of OpenSSL has on different
platforms/distributions different ciphers included.

All the best
-g

On 23.03.20 17:23, Brian Fenton wrote:
error loading ciphers: TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256


_______________________________________________
naviserver-devel mailing list
naviserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/naviserver-devel
_______________________________________________
naviserver-devel mailing list
naviserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/naviserver-devel

Reply via email to