Can TLS 1.3 be enabled for libressl? I tested the latest wget 1.21.3 on
OpenBSD and wanted to test "Add option to select TLS 1.3 on the command
line."

According to this, TLS 1.3 support should be ready. related:
https://github.com/libressl-portable/portable/issues/228#issuecomment-712913693

$ openssl version
LibreSSL 3.5.2

$ wget --secure-protocol=TLSv1_3 
https://cdn.openbsd.org/pub/OpenBSD/7.0/amd64/install70.img
--2022-03-21 19:54:02--  
https://cdn.openbsd.org/pub/OpenBSD/7.0/amd64/install70.img
Your OpenSSL version is too old to support TLS 1.3
Disabling SSL due to encountered errors.

$ wget --version
GNU Wget 1.21.3 built on openbsd7.1.

-cares +digest -gpgme +https +ipv6 +iri +large-file -metalink +nls 
+ntlm +opie +psl +ssl/openssl 

Wgetrc: 
    /etc/wgetrc (system)
Locale: 
    /usr/local/share/locale 
Compile: 
    cc -DHAVE_CONFIG_H -DSYSTEM_WGETRC="/etc/wgetrc" 
    -DLOCALEDIR="/usr/local/share/locale" -I. -I../lib -I../lib 
    -I/usr/local/include -I/usr/local/include -I/usr/local/include 
    -DHAVE_LIBSSL -I/usr/local/include -DNDEBUG -O2 -pipe 
Link: 
    cc -I/usr/local/include -I/usr/local/include -DHAVE_LIBSSL 
    -I/usr/local/include -DNDEBUG -O2 -pipe -L/usr/local/lib 
    -L/usr/local/lib -lpcre2-8 -L/usr/local/lib -lidn2 -lssl -lcrypto 
    -lz -L/usr/local/lib -lpsl ../lib/libgnu.a 
    /usr/local/lib/libiconv.so.7.0 /usr/local/lib/libintl.so.7.0 
    /usr/local/lib/libiconv.so.7.0 -Wl,-rpath,/usr/local/lib 
    /usr/local/lib/libunistring.so.0.1 /usr/local/lib/libiconv.so.7.0 
    -Wl,-rpath,/usr/local/lib

Reply via email to