Additional suggestions for TLS version selection

[youngbeggar]

Dear rejetto,

I think HFS is currently connecting to TLS 1.3. Is it possible to add the option to connect to TLS 1.2 only, or TLS 1.3 only, or to support TLS 1.2 and TLS 1.3 simultaneously?

[rejetto]

why this request?

[youngbeggar]

My subordinates need training on how to operate TLS. Since 1.2 and 1.3 work differently, I am wondering if it is possible to add it for training purposes.

[rejetto]

it's not clear to me if you are talking about the connections received by hfs, or the occasional requests hfs does to other servers

[youngbeggar]

This is when the client connects to the HFS Server. (Client -> HFS Server)

When HTTPS is enabled for HFS, when I connect to HFS Server from Client, it shows up as TLS 1.3 in WireShark. I'm going to practice the SSL Handshake course for TLS 1.2 for educational purposes, and I'm going to train with HFS.

[rejetto]

why don't you just specify TLS version on the client? like this

const https = require('https');

const options = {
  hostname: 'example.com',
  port: 443,
  path: '/',
  method: 'GET',
  secureProtocol: 'TLSv1_2_method', // Force TLS 1.2
};

const req = https.request(options, (res) => {
  console.log('statusCode:', res.statusCode);
  res.on('data', (d) => {
    process.stdout.write(d);
  });
});

[youngbeggar]

OK. Thanks