Comments (6)
The first problem is probably the same issue as #13.
I'll take a look at the TLS 1.3 issue.
from nginx-ct.
What version of OpenSSL/nginx are you using?
from nginx-ct.
Hey,
I have two systems
nginx version: nginx/1.11.9
built by gcc 5.4.0 20160609 (Ubuntu 5.4.0-6ubuntu1~16.04.4)
built with OpenSSL 1.1.0c 10 Nov 2016
TLS SNI support enabled
and \
nginx version: nginx/1.11.9
built by gcc 6.2.0 20161005 (Ubuntu 6.2.0-5ubuntu12)
built with OpenSSL 1.1.1-dev xx XXX xxxx
TLS SNI support enabled
from nginx-ct.
There is also a bug when using TLSv1.3, the CT does not work at all.
Firefox reports 0 CT when using TLSv1.3 but does report when using TLSv1.2
this in on the
nginx version: nginx/1.11.9
built by gcc 6.2.0 20161005 (Ubuntu 6.2.0-5ubuntu12)
built with OpenSSL 1.1.1-dev xx XXX xxxx
TLS SNI support enabled
configure arguments: --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx --conf-path=/etc/nginx/nginx.conf --pid-path=/usr/local/nginx/nginx.pid --with-pcre=../pcre-8.40 --with-zlib=../zlib-1.2.11 --with-http_ssl_module --with-openssl=/hom
e/night/Downloads/openssl --with-openssl-opt=enable-tls1_3 --with-http_gzip_static_module --with-http_addition_module --with-http_dav_module --with-http_stub_status_module --with-http_sub_module --with-http_ssl_module --with-stream --
with-stream_ssl_module --with-mail=dynamic --with-http_v2_module --add-dynamic-module=/opt/nginx-ct --with-mail=dynamic
from nginx-ct.
Yeah It does look a lot like #13, so this one can be closed, or do you want to to remain open for TLS1.3?
Since SSLLabs fails to test TLS1.3 only, Firefox does report back no CT for my domains when it is on TLS1.3
from nginx-ct.
Closing (as it's covered by #13 and the new #21)
from nginx-ct.
Related Issues (20)
- TLS 1.3 support HOT 1
- Automated tests
- 421 Response from nginx when certs and /path/to/scts defined in "http" and using client certificate HOT 6
- This doesnโt compile against OpenSSL 1.1.1 branch draft-18 of TLS 1.3 HOT 3
- Detect does not work with dynamic mail and stream HOT 1
- Error whilst compiling nginx-ct with Openssl 1.1.1-dev (tls1.3-draft-18)
- Building with nginx 13.3.3 HOT 4
- No .so file found HOT 2
- Cann't build with this module HOT 1
- Mail and Stream ssl_ct modules not compiling? HOT 1
- Using ngx_mail_ssl_ct_module HOT 2
- Compile nginx (1.13.7) + openssl (tls1.3-draft-18) + nginx-ct HOT 2
- ngx_ssl_ct_module.so is not binary compatible HOT 2
- error with last chrome and openssl HOT 1
- What is sct files HOT 4
- generating errors with some older browsers. as result, page not displayed. HOT 1
- Variable support
- undefined symbol: ngx_modules HOT 1
- undefined symbol: SSL_CTX_add_custom_ext
- undefined symbol: ngx_ssl_ct_create_srv_conf HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. ๐๐๐
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google โค๏ธ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from nginx-ct.