Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Základní principy a pojmy

...

Příklad volání  endpointu Detail uživatele

Technická informace k verzi TLS

Server chce:

# TLS 1.2 (suites in server-preferred order)

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f) ECDH x25519 (eq. 3072 bits RSA) FS 128

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030) ECDH x25519 (eq. 3072 bits RSA) FS 256

TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (0xcca8) ECDH x25519 (eq. 3072 bits RSA) FS 256

Client umí:

TLS 1.2 ECC GCM cipher suites:

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256_P256

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256_P384

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256_P521

TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384_P384

TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384_P521

Podle RFC https://datatracker.ietf.org/doc/html/rfc5289  jsou všechny ty algoritmy z 2008.

Zda je deprecated/obsolete bohužel nejde poznat.

Po hledání jsme zjistili, že pro Win2012R2 neexistuje:

https://willjessiam.blog/2021/02/06/tls_ecdhe_rsa_with_aes_256_gcm_sha384-cipher-with-server-2012-r2/

https://docs.microsoft.com/en-us/answers/questions/227738/windows-server-2012-r2-tls-12-cipher-suites.html

Tam je opravdu jediné řešení OS Upgrade.