Re: How to not send TLS 1.3 Ciphers?

2020-04-15 Thread Petr Pisar via curl-library
On Thu, Apr 16, 2020 at 12:36:24AM +0200, Mark Windshield via curl-library wrote: > I'm trying to not send TLS 1.3 Ciphers when making a request through > libcurl (but have the option to set them), I tried compiling openssl with > 'define TLS_DEFAULT_CIPHERSUITES " " ' instead of it containing

Re: How to not send TLS 1.3 Ciphers?

2020-04-15 Thread Ray Satiro via curl-library
On 4/15/2020 6:36 PM, Mark Windshield via curl-library wrote: I'm trying to not send TLS 1.3 Ciphers when making a request through libcurl (but have the option to set them), I tried compiling openssl with 'define TLS_DEFAULT_CIPHERSUITES " " ' instead of it containing the three "default"

Re: TLS handshake failures on socks proxy

2020-04-15 Thread Anand Sridharan via curl-library
Hi , Yes , technically but we need specific requirement to support TLS only for initial negotiations and then bring down TLS tunnel. we tried stunnel as well we seem to get empty response from server after initial negiotiations curl: (52) Empty reply from server. Hence if we are able to handshake

How to not send TLS 1.3 Ciphers?

2020-04-15 Thread Mark Windshield via curl-library
Hello, I'm trying to not send TLS 1.3 Ciphers when making a request through libcurl (but have the option to set them), I tried compiling openssl with 'define TLS_DEFAULT_CIPHERSUITES " " ' instead of it containing the three "default" ciphers, but when replacing openssl and using liubcurl with

Re: TLS handshake failures on socks proxy

2020-04-15 Thread Daniel Stenberg via curl-library
On Wed, 15 Apr 2020, Anand Sridharan wrote: we would need TLS for initial negotiations only then data transfer to happen with normal raw socket , hence stunnel may not totally help us. This statement puzzled me so I need to ask. When you use a SOCKS proxy there's just that single connection

Re: MQTT

2020-04-15 Thread Daniel Stenberg via curl-library
On Wed, 15 Apr 2020, Christoph Krey via curl-library wrote: in MQTT protocol, the server may start to send PUBLISH messages (especially if those are retained) before replying with SUBACK to a SUBSCRIBE. The current implementation in curl waits for a SUBACK or DISCONNECT after the SUBSCRIBE.

Re: TLS handshake failures on socks proxy

2020-04-15 Thread Anand Sridharan via curl-library
Thanks Daniel , updated comments On Tue, Apr 14, 2020 at 11:29 PM Daniel Stenberg wrote: > On Tue, 14 Apr 2020, Anand Sridharan via curl-library wrote: > > > Method 1 - use existing api's used for http proxy but remove any > conditions > > specific for HTTPS proxy.(wireshark:

Re: MQTT

2020-04-15 Thread Christoph Krey via curl-library
Hello, > > I tried doing: > > ./curl 'mqtt://test.mosquitto.org/de.wsv/pegel/cm/ems/emshoern' --output - > > That topic currently has a retained message with content "582". The > response I get from curl is: > > curl: (8) Weird server reply > de.wsv/pegel/cm/ems/emshoern582 in MQTT protocol,

Re: MQTT

2020-04-15 Thread Daniel Stenberg via curl-library
On Wed, 15 Apr 2020, Daniel Stenberg via curl-library wrote: I cannot reproduce that. Doing that command line here seems to get a partial response and then it sits waiting for the rest: After looking at what I wrote there, it struck me that it doesn't actually "wait for the rest". It gets 33

Re: TLS handshake failures on socks proxy

2020-04-15 Thread Daniel Stenberg via curl-library
On Tue, 14 Apr 2020, Anand Sridharan via curl-library wrote: Method 1 - use existing api's used for http proxy but remove any conditions specific for HTTPS proxy.(wireshark: lo_sslversion.pcap) - SSL upgrade of existing socket using curl API’s curl_ssl_connect_nonblocking and

Re: MQTT

2020-04-15 Thread Daniel Stenberg via curl-library
On Wed, 15 Apr 2020, Roger Light via curl-library wrote: ./curl 'mqtt://test.mosquitto.org/de.wsv/pegel/cm/ems/emshoern' --output - That topic currently has a retained message with content "582". The response I get from curl is: curl: (8) Weird server reply de.wsv/pegel/cm/ems/emshoern582 I