<div dir="ltr"><div>
<p class="gmail-isSelectedEnd"><span>Hi everyone,</span></p><p class="gmail-isSelectedEnd"><span>I’m running </span><strong><span>OpenSIPS 3.4.13</span></strong><span> with </span><strong><span>wolfSSL 5.4.0</span></strong><span>, built with </span><code dir="ltr"><span>--disable-shared --enable-static</span></code><span>.</span></p><p class="gmail-isSelectedEnd"><span>I’m configuring the TLS method as </span><code dir="ltr"><span>TLSv1_3</span></code><span>. TLS 1.2 works correctly with the same endpoint/configuration, but TLS 1.3 fails during the handshake with:</span></p><pre dir="ltr"><code dir="ltr"><span>SSL3 alert read:fatal:handshake failure
SSL_connect:error in error
139734869747008:error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure:../ssl/record/rec_layer_s3.c:1571:SSL alert number 40</span></code></pre><p class="gmail-isSelectedEnd"><span>The </span><code dir="ltr"><span>tls_wolfssl.so</span></code><span> module contains wolfSSL 5.4.0 and was compiled with </span><code dir="ltr"><span>DWOLFSSL_TLS13</span></code><span>, </span><code dir="ltr"><span>HAVE_AESGCM</span></code><span>, </span><code dir="ltr"><span>HAVE_CHACHA</span></code><span>, </span><code dir="ltr"><span>HAVE_CURVE25519</span></code><span>, etc.</span></p><p><span>Has anyone experienced TLS 1.3 handshake failures with </span><strong><span>OpenSIPS + wolfSSL</span></strong><span>, particularly when TLS 1.2 works but TLS 1.3 does not?</span></p>

Are there any suggestions from someone in the community ?</div><div><br></div><div><br></div><div><br></div><div>
<div>Thanks</div><div><br></div><div>Regards,</div><div>Jason</div>

<br></div></div>