Re: TLS 1.3 ClientHello and Windows 11

2023-03-28 Thread t...@openbsd.org
On Tue, Mar 28, 2023 at 10:17:17AM +, Gerhard Roth wrote: > I stumbled upon a problem that xfreerdp couldn't connect to Windows 11 > servers with NLA and TLS 1.3. This can also be reproduced with > > # openssl -tls1_3 -connect :3389 > > Here openssl will fail with a "tlsv1 alert

TLS 1.3 ClientHello and Windows 11

2023-03-28 Thread Gerhard Roth
I stumbled upon a problem that xfreerdp couldn't connect to Windows 11 servers with NLA and TLS 1.3. This can also be reproduced with # openssl -tls1_3 -connect :3389 Here openssl will fail with a "tlsv1 alert internal error" instead of blocking in "read R BLOCK". So I played around