Changes between Initial Version and Version 1 of Ticket #1050, comment 12


Ignore:
Timestamp:
04/13/18 16:04:31 (6 years ago)
Author:
Selva Nair
Comment:

Legend:

Unmodified
Added
Removed
Modified

  • Ticket #1050, comment 12

    initial v1  
    22>cryptoapicert "THUMB:xx xx xx ....."
    33
    4 Yes, CNG support (and hence TLS 1.2) needs newer versions of the safenet token driver. With some old versions you will get the "TLS version downgrade" warning but would still work if TLS 1.1 is acceptable -- in fact a graceful fallback to 1.1 was my main concern and the only case I had tested when CNG support was added to 2.4.5.
     4Yes, CNG support (and hence TLS 1.2) needs newer versions of the safenet token driver. With some old versions you will get the "TLS version downgrade" warning but would still work if TLS 1.1 is acceptable -- in fact a graceful fallback to 1.1 was my main concern and the only case I had tested with hardware tokens when CNG support was added to 2.4.5.
    55
    66Can anyone test this using a token with a different driver than safenet? I wonder whether this issue with 2.4.5 shows up only with some token drivers.