Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Tls 1.0 is forced by the Iec-104 server. #33

Open
arifmjcet opened this issue Sep 27, 2024 · 1 comment
Open

Tls 1.0 is forced by the Iec-104 server. #33

arifmjcet opened this issue Sep 27, 2024 · 1 comment

Comments

@arifmjcet
Copy link

Hi, While testing Tls implementation of iec-104 server, it is observed that the server is selecting TLS 1.0 even when the client supports higher versions. Upon inspecting the code it is found that in lib60870/CS104/ClientConnection.cs file line 1235,
"sslStream.AuthenticateAsServer(tlsSecInfo.OwnCertificate, true, System.Security.Authentication.SslProtocols.Tls, false);" here tls version 1.0 is explicitly specified causing server to choose the old tls 1.0 version. If we replace the above line with
"sslStream.AuthenticateAsServer(tlsSecInfo.OwnCertificate, true, System.Security.Authentication.SslProtocols.Tls12 | System.Security.Authentication.SslProtocols.Tls13, false);"
The above issue is resolved.

@psnx
Copy link

psnx commented Oct 17, 2024

This is addressed in pull request 28.
I am waiting for this to baccepted.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants