Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enhancement: MQTT TLS listeners with multiple TLS versions. #2237

Open
ioolkos opened this issue Jan 7, 2024 · 0 comments
Open

Enhancement: MQTT TLS listeners with multiple TLS versions. #2237

ioolkos opened this issue Jan 7, 2024 · 0 comments

Comments

@ioolkos
Copy link
Contributor

ioolkos commented Jan 7, 2024

The MQTT TLS listeners are currently bound to a specific TLS version. This is per default 'tlsv1.2', as per the following line in the creation of the TLS opts:

{versions, [proplists:get_value(tls_version, Opts, 'tlsv1.2')]}

The TLS protocol version is currently configured per listener, with tls_version. We might want to find a setting for configuring multiple versions, so that we can add them to the Ranch socket opts as {versions, ['tlsv1.2', 'tlsv1.3']}.

In recent Erlang versions, not configuring a version for a TLS server socket will enable tlsv1.2 and tlsv1.3 while tlsv1.1 will be blocked.
We might need to investigate the role of certs and ciphers to configure a combined-versions MQTT listener.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant