Update witness node/wallet to TLS 1.3 #370

New issue

Closed

opened 2022-05-17 21:35:56 +00:00 by serkixenos · 4 comments

serkixenos commented

2022-05-17 21:35:56 +00:00

(Migrated from gitlab.com)

robert.hedler
Admin
10:29 PM
aaaaaaaaaaaand we have good and bad news 😞
Good news: I find the root cause that why cli_wallet of our new docker images dont connect on WSS.
Bad news: by default, Ubuntu 20.04 droped support for TLS lower than 1.2
my node is using ubuntu 18.04 where my seed is running
we need to edit /etc/ssl/openssl.cnf
with this, after oid_section variable:
# System default
openssl_conf = default_conf


Then in the end of the file put this:
[default_conf]
ssl_conf = ssl_sect

[ssl_sect]
system_default = system_default_sect

[system_default_sect]
MinProtocol = TLSv1
CipherString = DEFAULT@SECLEVEL=1


jbahai
Admin
Owner
10:33 PM
OH... this is important actually for our continued support of U18... this no doubt would come up in testing.. perhaps the wallet needs to be updated to TLS 1.3?


robert.hedler
Admin
10:33 PM
it should be

https://chat.peerplays.live/channel/infrastructure-devops?msg=o3wgp9kgAJBuWwTho

``` robert.hedler Admin 10:29 PM aaaaaaaaaaaand we have good and bad news 😞 Good news: I find the root cause that why cli_wallet of our new docker images dont connect on WSS. Bad news: by default, Ubuntu 20.04 droped support for TLS lower than 1.2 my node is using ubuntu 18.04 where my seed is running we need to edit /etc/ssl/openssl.cnf with this, after oid_section variable: # System default openssl_conf = default_conf Then in the end of the file put this: [default_conf] ssl_conf = ssl_sect [ssl_sect] system_default = system_default_sect [system_default_sect] MinProtocol = TLSv1 CipherString = DEFAULT@SECLEVEL=1 jbahai Admin Owner 10:33 PM OH... this is important actually for our continued support of U18... this no doubt would come up in testing.. perhaps the wallet needs to be updated to TLS 1.3? robert.hedler Admin 10:33 PM it should be ``` https://chat.peerplays.live/channel/infrastructure-devops?msg=o3wgp9kgAJBuWwTho

serkixenos commented

2022-08-23 01:40:30 +00:00

(Migrated from gitlab.com)

marked this issue as related to #413

serkixenos commented

2022-10-10 23:42:14 +00:00

(Migrated from gitlab.com)

https://gitlab.com/PBSA/peerplays/-/issues/413

serkixenos commented

2022-10-11 00:22:51 +00:00

(Migrated from gitlab.com)

assigned to @mkhan17

robert.hedler commented

2022-10-11 18:06:47 +00:00

(Migrated from gitlab.com)

this issue is fixed with fix on issue 413: https://gitlab.com/PBSA/peerplays/-/issues/413
It was already tested on issue 413 and the connection was successful.

this issue is fixed with fix on issue 413: https://gitlab.com/PBSA/peerplays/-/issues/413 It was already tested on issue 413 and the connection was successful.

robert.hedler (Migrated from gitlab.com) closed this issue

2022-10-11 18:06:48 +00:00