TWSD-704 Requirement to add TLS1.3 supported all ciphers under SSL virtual host

Review Request #877 — Created May 20, 2025 and submitted

peteryeh
APV10
rel_apv_10_7
TWSD-704
kevin.poh, tanya, timlai, timsu, weikai

Add TLSv1.3 TLS_CHACHA20_POLY1305_SHA256, TLS_AES_128_CCM_SHA256, TLS_AES_128_CCM_8_SHA256 cipher for virtual host.

Test using browser and OpenSSL s_client:
openssl s_client -connect 192.168.10.91:10443 -tls1_3 -ciphersuites TLS_CHACHA20_POLY1305_SHA256
openssl s_client -connect 192.168.10.91:10443 -tls1_3 -ciphersuites TLS_AES_128_CCM_SHA256
openssl s_client -connect 192.168.10.91:10443 -tls1_3 -ciphersuites TLS_AES_128_CCM_8_SHA256

TLS_AES_128_CCM_SHA256, TLS_AES_128_CCM_8_SHA256 not supported for regular browser. Can only verify with openssl s_client.

Review Note: Some of the file cannot display on Reviewboard page for some reason.
Please download diff to review, thanks!

timlai
  1. Ship It!
  2. 
      
kevin.poh
  1. Ship It!
  2. 
      
peteryeh
Review request changed

Status: Closed (submitted)

Loading...