Node.js with SSL/TLS protocol v1.2Our security auditor is an idiot. How do I give him the information he wants?How to disable TLS 1.1 & 1.2 in Apache?Is it possible to enable TLS v 1.2 in Debian squeezeHow to Make a Self-Signed SSL Certificate which uses TLS?Certificates not working optimally with NGINXHow to configure IIS 7.5 SSL TLS to work with iOS 9 ATSUsing TLS 1.2 and java 6Updating to openssl 1.0.1 or greater on a very old Ubuntu 8.04.3 LTS boxEnabling TLS v1.2 on centos 7 SSL NSS/3.15.4
Multi tool use
Who is frowning in the sentence "Daisy looked at Tom frowning"?
What formula to chose a nonlinear formula?
multiline equation inside a matrix that is a part of multiline equation
Is it standard to have the first week's pay indefinitely withheld?
Can a person still be an Orthodox Jew and believe that the Torah contains narratives that are not scientifically correct?
"Counterexample" for the Inverse function theorem
Refer a string as a field API name
What would a Dragon have to exhale to cause rain?
Why do galaxies collide?
Find the area of the rectangle
Why aren't satellites disintegrated even though they orbit earth within their Roche Limits?
Failing students when it might cause them economic ruin
Would a "ring language" be possible?
Cuban Primes
Why didn't Daenerys' advisers suggest assassinating Cersei?
Is Precocious Apprentice enough for Mystic Theurge?
How can I safely determine the output voltage and current of a transformer?
Why does the U.S military use mercenaries?
Why can't I share a one use code with anyone else?
Physically unpleasant work environment
Do we see some Unsullied doing this in S08E05?
SHAKE-128/256 or SHA3-256/512
A latin word for "area of interest"
How do Ctrl+C and Ctrl+V work?
Node.js with SSL/TLS protocol v1.2
Our security auditor is an idiot. How do I give him the information he wants?How to disable TLS 1.1 & 1.2 in Apache?Is it possible to enable TLS v 1.2 in Debian squeezeHow to Make a Self-Signed SSL Certificate which uses TLS?Certificates not working optimally with NGINXHow to configure IIS 7.5 SSL TLS to work with iOS 9 ATSUsing TLS 1.2 and java 6Updating to openssl 1.0.1 or greater on a very old Ubuntu 8.04.3 LTS boxEnabling TLS v1.2 on centos 7 SSL NSS/3.15.4
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
I would like to use TLS 1.2 on my node.js server. I'm currently using openssl 1.0.0e.
If I upgrade to openssl 1.0.1, do I need to rebuild node.js to upgrade to TLS 1.2? Are there configuration or build settings to specify which ciphers I want to use?
Also, after upgrading to TLS 1.2 would I need to generate new SSL certificates?
security ssl openssl tls node.js
asked Mar 24 '12 at 2:54
iRyanBelliRyanBell
1631619
add a comment |
I would like to use TLS 1.2 on my node.js server. I'm currently using openssl 1.0.0e.
If I upgrade to openssl 1.0.1, do I need to rebuild node.js to upgrade to TLS 1.2? Are there configuration or build settings to specify which ciphers I want to use?
Also, after upgrading to TLS 1.2 would I need to generate new SSL certificates?
security ssl openssl tls node.js
asked Mar 24 '12 at 2:54
iRyanBelliRyanBell
1631619
1
I think i'd probably just use stunnel to wrap connections ahead of node.js
– Tom O'Connor
Mar 26 '12 at 22:12
add a comment |
I would like to use TLS 1.2 on my node.js server. I'm currently using openssl 1.0.0e.
If I upgrade to openssl 1.0.1, do I need to rebuild node.js to upgrade to TLS 1.2? Are there configuration or build settings to specify which ciphers I want to use?
Also, after upgrading to TLS 1.2 would I need to generate new SSL certificates?
security ssl openssl tls node.js
asked Mar 24 '12 at 2:54
iRyanBelliRyanBell
1631619
I would like to use TLS 1.2 on my node.js server. I'm currently using openssl 1.0.0e.
If I upgrade to openssl 1.0.1, do I need to rebuild node.js to upgrade to TLS 1.2? Are there configuration or build settings to specify which ciphers I want to use?
Also, after upgrading to TLS 1.2 would I need to generate new SSL certificates?
security ssl openssl tls node.js
security ssl openssl tls node.js
asked Mar 24 '12 at 2:54
iRyanBelliRyanBell
1631619
asked Mar 24 '12 at 2:54
iRyanBelliRyanBell
1631619
edited Mar 24 '12 at 5:28
iRyanBell
asked Mar 24 '12 at 2:54
iRyanBelliRyanBell
1631619
asked Mar 24 '12 at 2:54
iRyanBelliRyanBell
1631619
asked Mar 24 '12 at 2:54
iRyanBelliRyanBell
1631619
1631619
1
I think i'd probably just use stunnel to wrap connections ahead of node.js
– Tom O'Connor
Mar 26 '12 at 22:12
add a comment |
1
I think i'd probably just use stunnel to wrap connections ahead of node.js
– Tom O'Connor
Mar 26 '12 at 22:12
1
1
I think i'd probably just use stunnel to wrap connections ahead of node.js
– Tom O'Connor
Mar 26 '12 at 22:12
I think i'd probably just use stunnel to wrap connections ahead of node.js
– Tom O'Connor
Mar 26 '12 at 22:12
add a comment |
1 Answer
1
active
oldest
votes
Seems that OpenSSL is fully backward compatible. I've updated OpenSSL till it was only 0.9.3 and hasn't any problems with certificates.
OpenSSL has options to build with various crypt schemes, including proprietary/patented, so you can choose what you want.
edited Apr 26 '15 at 20:06
drewish
1155
answered Apr 2 '12 at 11:02
KondybasKondybas
6,37621422
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f372940%2fnode-js-with-ssl-tls-protocol-v1-2%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Seems that OpenSSL is fully backward compatible. I've updated OpenSSL till it was only 0.9.3 and hasn't any problems with certificates.
OpenSSL has options to build with various crypt schemes, including proprietary/patented, so you can choose what you want.
edited Apr 26 '15 at 20:06
drewish
1155
answered Apr 2 '12 at 11:02
KondybasKondybas
6,37621422
add a comment |
Seems that OpenSSL is fully backward compatible. I've updated OpenSSL till it was only 0.9.3 and hasn't any problems with certificates.
OpenSSL has options to build with various crypt schemes, including proprietary/patented, so you can choose what you want.
edited Apr 26 '15 at 20:06
drewish
1155
answered Apr 2 '12 at 11:02
KondybasKondybas
6,37621422
add a comment |
Seems that OpenSSL is fully backward compatible. I've updated OpenSSL till it was only 0.9.3 and hasn't any problems with certificates.
OpenSSL has options to build with various crypt schemes, including proprietary/patented, so you can choose what you want.
edited Apr 26 '15 at 20:06
drewish
1155
answered Apr 2 '12 at 11:02
KondybasKondybas
6,37621422
Seems that OpenSSL is fully backward compatible. I've updated OpenSSL till it was only 0.9.3 and hasn't any problems with certificates.
OpenSSL has options to build with various crypt schemes, including proprietary/patented, so you can choose what you want.
edited Apr 26 '15 at 20:06
drewish
1155
answered Apr 2 '12 at 11:02
KondybasKondybas
6,37621422
edited Apr 26 '15 at 20:06
drewish
1155
edited Apr 26 '15 at 20:06
drewish
1155
edited Apr 26 '15 at 20:06
drewish
1155
1155
answered Apr 2 '12 at 11:02
KondybasKondybas
6,37621422
answered Apr 2 '12 at 11:02
KondybasKondybas
6,37621422
answered Apr 2 '12 at 11:02
KondybasKondybas
6,37621422
6,37621422
add a comment |
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f372940%2fnode-js-with-ssl-tls-protocol-v1-2%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
xlD0wBEYwUdwSTCFA2iwlLAo8
1
I think i'd probably just use stunnel to wrap connections ahead of node.js
– Tom O'Connor
Mar 26 '12 at 22:12