Skip to content

Add support for TLS 1.3, REF #15694

George Yang requested to merge gyang-rdkb into asterisk_rdkb

  • TLS 1.3 can be enabled by setting "method = tlsv1_3" under section [transport-tls]

  • TLS 1.3 (OpenSSL 1.1.1l) supports following 5 ciphers, including the 1tr114 required 4 ciphers which are enabled by default:

    • "TLS_AES_128_GCM_SHA256"
    • "TLS_AES_256_GCM_SHA384"
    • "TLS_AES_128_CCM_SHA256"
    • "TLS_CHACHA20_POLY1305_SHA256"
    • "TLS_AES_128_CCM_8_SHA256" (not enabled by default)

Merge request reports