9160 TLS version

[William.wei]

hi support team,

from our web we can see that we intergrated TLS1.2 and DTLS1.2 with modem, may i ask if it means only TLS1.2?

one customer told me they are using TLS1.0, and may i ask does it work with our TLS1.2?

and from link:https://developer.nordicsemi.com/nRF_Connect_SDK/doc/1.6.1/nrfxlib/nrf_modem/doc/supported_features.html

i can see that ncs1.6.1 is also only with TLS 1.2 right?

Regards,

William.

[helsing]

Hi William,

Just letting you know I have started looking into this.

Regards,

Håkon

[Achim Kraus]

Regardless, if the nRF9160 works with TLS 1.0 or not, I would at least ensure, that your customer is aware of the security risk and really wants to continue to use TLS 1.0 and not offering TLS 1.2. The very most cloud provider has disabled the support fpr TLS 1.0, the IETF has marked it as "not recommended". And even if your customer needs to support TLS 1.0, the customer should be able to enable support for TLS 1.2 additionally.

[helsing]

does it work with our TLS1.2?

No, support for TLS 1.0 has been removed from Mbed TLS. It is not recommended to use version 1.0 as it is not secure.

https://securityaffairs.co/116151/security/ietf-deprecates-tls-1-0-tls-1-1.html

What is the customer's use-case?

[William.wei]

Thank you! Kraus!