Skip to content

TLS cipher suite hardcoded to AES-128-GCM-SHA256 #132

@pawelchcki

Description

@pawelchcki

Hi!

src/client.rs hardcodes Aes128GcmSha256 in the CryptoProvider impl,
the TlsConnection<_,_,..> type, and the HttpConnection::Tls variant
(L67, L205, L304). The ClientHello only ever offers TLS_AES_128_GCM_SHA256,
so servers that don't accept it can't complete a handshake.

Hits me on one of backend entrypoints offering only TLS_AES_256_GCM_SHA384. Likely
also the root cause of #96.

Other than probably some larger refactoing - I can add a quick pr aes256-sha384 feature that swaps the suite via a
private type alias?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions