Skip to main content
4 votes

server negotiating TLS1.3 but sent TLS1.2 ciphersuite

You basically describe a behavior where the server violates the standard, i.e. using a TLS 1.2 cipher with TLS 1.3. Common reaction to non-standard behavior of the server is to simply close the ...
Steffen Ullrich's user avatar
2 votes

In TLS1.3 can the client hello have the extensions which were not sent as part of HelloRetryRequest

The HelloRetryRequest can only contain the extensions listed in section 4.2 of RFC 8446 (the table on page 37). Those are: key_share, supported_versions and cookie. Note that the purpose of a ...
Ja1024's user avatar
  • 11.4k
1 vote

Can mutual TLS work with a self-signed client certificate?

Yes, it can work. You only need to have a mapping from the user (or client) identity to the corresponding user (or client) public key (eg. in stored database). Actually you don't need need ...
ysdx's user avatar
  • 1,785
1 vote

Can mutual TLS work with a self-signed client certificate?

Prove of posession of the private key does a lot, but mutual authentication as OpenSSL implements it checks all CA certificates along the chain if they end up in a Root-CA the server trusts. So, it ...
Boettinger's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible