Skip to main content

Support of TLS v1.3 ?

Completed
Scan

The Cerberus FTP server does not support TLS v1.3 which is the only version of TLS that currently has no known flaws or exploitable weaknesses. Can U add the TLS v1.3 support to your software?

1

Comments

5 comments

Date Votes
  • Dana Anderson
    Product Support

    We would like to release a version of Cerberus that supports TLS 1.3. What is holding us back at this point is currently the OpenSSL 1.1.1 branch is not FIPS 140-2 certified yet. 

    To provide support for TLS 1.3 today we would have to release two versions of Cerberus one for TLS 1.3 and one that supports FIPS-140. 

    Once OpenSSL version 3.0 is release which is promised to have support for both, we will then include support for TLS 1.3

     

     

    0
  • Bill Smyth

    I read that OpenSSL 3.0 was released last week, 21-Sep-2021. Is there any anticipated release date for adding TLS 1.3? 

    Thanks!

    0
  • Dana Anderson
    Product Support
    • Edited

    Hi, Bill. 

    While OpenSSL 3.0 is now available, it hasn't had FIPS 140-2 certification yet. 

    OpenSSL has submitted their OpenSSL 3.0 FIPS module for validation, but the review and validation process takes many months. 

    Once OpenSSL has been FIPS certified, Cerberus will add TLS 1.3. 

    For more information, you can reference the OpenSSL announcement: https://www.openssl.org/blog/blog/2021/09/22/OpenSSL3-fips-submission/

    0
  • Connor Woolfolk
    Community Manager

    Hello everyone!

    I would just like to quickly announce that TLS 1.3 is available in our latest release, 12.11.0!

    You can read the full release notes at this link, and we encourage you to contact support with any questions or issues you may have.

    1
  • Scan

    Great Job! Thank U very much! Almost 3 years of waiting for this option - and it works great! Thanks again!

    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post