How do you make an ssl certificate with tls 1.3?

user_14115692 0
Viewed 5522

so, for a while now I've been trying to figure out how do you issue an SSL certificate with tls 1.3 and not tls 1.2 because I'm not sure if I need to change something in my OpenSSL.cnf file or if I need to add something to it?

here's the extensions i use:

[ server_cert ]<br>
basicConstraints = critical, CA:FALSE<br>
nsCertType = server<br>
subjectKeyIdentifier = hash<br>
authorityKeyIdentifier = keyid,issuer:always<br>
keyUsage = critical, digitalSignature, keyEncipherment<br>
extendedKeyUsage = serverAuth<br>
<br>

how do I add tls 1.3?

tls1.3 openssl
1 Answers

The certificate is independent from the TLS protocol version. You should be able to use the same certificate as you use with TLS 1.2, TLS 1.1, TLS 1.0 etc.

user_30810180
Related