Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 26 Jul 2018 08:51:53 -0500
From:      Benjamin Kaduk <kaduk@mit.edu>
To:        "PRAKASH RAI (prakrai)" <prakrai@cisco.com>
Cc:        "freebsd-security@freebsd.org" <freebsd-security@freebsd.org>
Subject:   Re: TLSv1.3 support in freeBSD 11.X
Message-ID:  <20180726135152.GK92448@kduck.kaduk.org>
In-Reply-To: <2ECA83EC-B156-43DF-AFDD-407BDFF74DAA@contoso.com>
References:  <2ECA83EC-B156-43DF-AFDD-407BDFF74DAA@contoso.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Jul 26, 2018 at 11:45:22AM +0000, PRAKASH RAI (prakrai) via freebsd-security wrote:
> Hi All,
> 
> I was going through the https://wiki.freebsd.org/OpenSSL and found that openssl 1.1.1 support is planned for freeBSD 12.
> As TLSv1.3 is based on openssl 1.1.1, does it mean that freeBSD 11.X would not be having support for TLSv1.3?
> 
> Basically I would like to understand if I can build openssl 1.1.1 (which is having support for TLSv1.3) with FreeBSD 11.2 without any issue and enable TLSv1.3 support?

The tools in the base system of FreeBSD 11.2 will not support TLS 1.3.  You
can of course build other (i.e., newer) software from the Ports Collection
or install from packages, as they become available; in that way it will be
possible to use TLS 1.3 from FreeBSD 11.2.

-Ben



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20180726135152.GK92448>