You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by "Ragosta, Vincent" <Vi...@Honeywell.com.INVALID> on 2023/04/24 19:15:21 UTC

Tomcat Native 1.2.30 -- Windows 2016 TLSv1.3 support?

Hello all,

We have an application packaged with Tomcat Native 1.2.30, which, per the following, the Windows binaries were built using OpenSSL 1.1.1k:

https://www.mail-archive.com/dev@tomcat.apache.org/msg152993.html

However, per Microsoft, Windows 2016 does not support TLSv1.3:

https://learn.microsoft.com/en-us/windows/win32/secauthn/protocols-in-tls-ssl--schannel-ssp-


Do Tomcat Native or OpenSSL depend upon support for TLSv1.3 in the underlying OS?


Thank you,

Vincent

RE: [External] Re: Tomcat Native 1.2.30 -- Windows 2016 TLSv1.3 support?

Posted by "Ragosta, Vincent" <Vi...@Honeywell.com.INVALID>.
Ok -- makes sense.

Thank you,

Vincent

-----Original Message-----
From: Christopher Schultz <ch...@christopherschultz.net> 
Sent: Tuesday, April 25, 2023 10:28 AM
To: users@tomcat.apache.org
Subject: [External] Re: Tomcat Native 1.2.30 -- Windows 2016 TLSv1.3 support?

WARNING: This message has originated from an External Source. This may be a phishing email that can result in unauthorized access to Honeywell systems. Please use proper judgment and caution when opening attachments, clicking links or responding.

Vincent,

On 4/25/23 05:14, Mark Thomas wrote:
> On 24/04/2023 20:15, Ragosta, Vincent wrote:
>> Hello all,
>>
>> We have an application packaged with Tomcat Native 1.2.30, which, per 
>> the following, the Windows binaries were built using OpenSSL 1.1.1k:
>>
>> https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww
>> .mail-archive.com%2Fdev%40tomcat.apache.org%2Fmsg152993.html&data=05%
>> 7C01%7CVincent.Ragosta%40honeywell.com%7C70f0a3eb5dc94a74900708db4599
>> 4f40%7C96ece5269c7d48b08daf8b93c90a5d18%7C0%7C0%7C638180297054464718%
>> 7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6I
>> k1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=q0CbLjS0uMiZz1xCezTSXQMr9
>> xEiDPwaBZubhLa4XkE%3D&reserved=0
>>
>> However, per Microsoft, Windows 2016 does not support TLSv1.3:
>>
>> https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Flea
>> rn.microsoft.com%2Fen-us%2Fwindows%2Fwin32%2Fsecauthn%2Fprotocols-in-
>> tls-ssl--schannel-ssp-&data=05%7C01%7CVincent.Ragosta%40honeywell.com
>> %7C70f0a3eb5dc94a74900708db45994f40%7C96ece5269c7d48b08daf8b93c90a5d1
>> 8%7C0%7C0%7C638180297054464718%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLj
>> AwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&
>> sdata=7HQSNFGjhMN%2B%2FMY6awtM7jtZdtTLK%2FNEQdRk1F7q%2B3o%3D&reserved
>> =0
>>
>>
>> Do Tomcat Native or OpenSSL depend upon support for TLSv1.3 in the 
>> underlying OS?
>
> No.

:)

To be more specific, OpenSSL *is an implementation of SSL/TLS and the underlying cryptographic primitives*. The whole point is that it is not dependent upon whatever the operating system supports.

-chris

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: Tomcat Native 1.2.30 -- Windows 2016 TLSv1.3 support?

Posted by Christopher Schultz <ch...@christopherschultz.net>.
Vincent,

On 4/25/23 05:14, Mark Thomas wrote:
> On 24/04/2023 20:15, Ragosta, Vincent wrote:
>> Hello all,
>>
>> We have an application packaged with Tomcat Native 1.2.30, which, per 
>> the following, the Windows binaries were built using OpenSSL 1.1.1k:
>>
>> https://www.mail-archive.com/dev@tomcat.apache.org/msg152993.html
>>
>> However, per Microsoft, Windows 2016 does not support TLSv1.3:
>>
>> https://learn.microsoft.com/en-us/windows/win32/secauthn/protocols-in-tls-ssl--schannel-ssp-
>>
>>
>> Do Tomcat Native or OpenSSL depend upon support for TLSv1.3 in the 
>> underlying OS?
> 
> No.

:)

To be more specific, OpenSSL *is an implementation of SSL/TLS and the 
underlying cryptographic primitives*. The whole point is that it is not 
dependent upon whatever the operating system supports.

-chris

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: Tomcat Native 1.2.30 -- Windows 2016 TLSv1.3 support?

Posted by Mark Thomas <ma...@apache.org>.
On 24/04/2023 20:15, Ragosta, Vincent wrote:
> Hello all,
> 
> We have an application packaged with Tomcat Native 1.2.30, which, per the following, the Windows binaries were built using OpenSSL 1.1.1k:
> 
> https://www.mail-archive.com/dev@tomcat.apache.org/msg152993.html
> 
> However, per Microsoft, Windows 2016 does not support TLSv1.3:
> 
> https://learn.microsoft.com/en-us/windows/win32/secauthn/protocols-in-tls-ssl--schannel-ssp-
> 
> 
> Do Tomcat Native or OpenSSL depend upon support for TLSv1.3 in the underlying OS?

No.

Mark

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org