TLSv1.3 support in freeBSD 11.X

[PRAKASH RAI (prakrai)]

Thanks Ben. This info will help us to plan our TLSv1.3 support activity.

Regards,
Prakash

On 26/07/18, 7:22 PM, "Benjamin Kaduk" <kaduk at mit.edu> wrote:

    On Thu, Jul 26, 2018 at 11:45:22AM +0000, PRAKASH RAI (prakrai) via freebsd-security wrote:
    > Hi All,
    > 
    > I was going through the https://wiki.freebsd.org/OpenSSL and found that openssl 1.1.1 support is planned for freeBSD 12.
    > As TLSv1.3 is based on openssl 1.1.1, does it mean that freeBSD 11.X would not be having support for TLSv1.3?
    > 
    > Basically I would like to understand if I can build openssl 1.1.1 (which is having support for TLSv1.3) with FreeBSD 11.2 without any issue and enable TLSv1.3 support?
    
    The tools in the base system of FreeBSD 11.2 will not support TLS 1.3.  You
    can of course build other (i.e., newer) software from the Ports Collection
    or install from packages, as they become available; in that way it will be
    possible to use TLS 1.3 from FreeBSD 11.2.
    
    -Ben