From mboxrd@z Thu Jan  1 00:00:00 1970
Message-ID: <e86c152dd5929622f20e185b03573638@quintile.net>
From: "Steve Simon" <steve@quintile.net>
Date: Tue, 15 Nov 2016 15:48:48 +0000
To: 9fans@9fans.net
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: 7bit
Subject: [9fans] tls 1.2
Topicbox-Message-UUID: aac86d2e-ead9-11e9-9d60-3106f5b1d025

Hi,

I am trying to get tls 1.2 working on a labs build of plan9.

What is most infuriating is I am sure I did this a few years ago but I cannot remember
how (or even if) I got it working.

what I have done is to install the following patches from 9legacy:

	libsec-chacha.diff				tls-devtls12.diff
	libsec-tlshand12-norc4.diff		tls-tlshand12.diff
	libsec-tlshand12-nossl3.diff

and rebuild my kernel and upas (where I need TLS1.2).

When I try to connect to a windows machine I get an error
from devtls in the kernel  of the length of the message is incorrect.

I have hacked around inside port/devtls.c but not found anything obvious,
I have also played with wireshark which didn't see anything very wrong.

I am sure I have missed an obvious step but I cannot see what it is.

Anyone help?

Thanks,

-Steve