-
Bug
-
Resolution: Unresolved
-
Normal
-
None
-
rhel-10.0
-
None
-
No
-
Moderate
-
rhel-sst-security-crypto
-
ssg_security
-
None
-
False
-
-
None
-
None
-
None
-
None
-
None
What were you trying to do that didn't work?
This is a downstream tracked for https://github.com/openssl/openssl/issues/25697.
When using brainpool certificates and TLS 1.3 connection between s_server and s_client does not work.
Please provide the package NVR for which the bug is seen:
openssl-3.2.2-13.el10
Steps to reproduce
- Generate brainpool certificates.
- Enabled brainpool curves in crypto-policies.
- Connect s_client to s_server using brainpool certificate and TLS 1.3 (or without specifying TLS version)
Expected results
Connection works
Actual results
Client
# openssl s_client -CAfile ca/cert.pem -connect localhost:4433 Connecting to ::1 CONNECTED(00000003) 8042F00A4B7F0000:error:0A000410:SSL routines:ssl3_read_bytes:ssl/tls alert handshake failure:ssl/record/rec_layer_s3.c:909:SSL alert number 40 --- no peer certificate available --- No client certificate CA names sent --- SSL handshake has read 7 bytes and written 292 bytes Verification: OK --- New, (NONE), Cipher is (NONE) This TLS version forbids renegotiation. Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 0 (ok) ---
Server
Security callback: Certificate chain EE key=, bits=256, security bits=128: yes Security callback: Certificate chain CA digest=RSA-SHA256, security bits=128: yes Security callback: Version=TLS 1.3: yes Security callback: Version=TLS 1.3: yes Security callback: Version=TLS 1.2: yes Security callback: Version=TLS 1.3: yes Security callback: Shared Ciphersuite=TLS_AES_256_GCM_SHA384, security bits=256: yes Security callback: Check Curve=X25519, security bits=128: yes Security callback: Supported Curve=X25519, security bits=128: yes Security callback: Shared Signature Algorithm scheme=ecdsa_secp256r1_sha256, security bits=128: yes Security callback: Shared Signature Algorithm scheme=ecdsa_secp384r1_sha384, security bits=192: yes Security callback: Shared Signature Algorithm scheme=ecdsa_secp521r1_sha512, security bits=256: yes Security callback: Shared Signature Algorithm scheme=ed25519, security bits=128: yes Security callback: Shared Signature Algorithm scheme=ed448, security bits=224: yes Security callback: Shared Signature Algorithm scheme=rsa_pss_pss_sha256, security bits=128: yes Security callback: Shared Signature Algorithm scheme=rsa_pss_pss_sha384, security bits=192: yes Security callback: Shared Signature Algorithm scheme=rsa_pss_pss_sha512, security bits=256: yes Security callback: Shared Signature Algorithm scheme=rsa_pss_rsae_sha256, security bits=128: yes Security callback: Shared Signature Algorithm scheme=rsa_pss_rsae_sha384, security bits=192: yes Security callback: Shared Signature Algorithm scheme=rsa_pss_rsae_sha512, security bits=256: yes Security callback: Shared Signature Algorithm scheme=rsa_pkcs1_sha256, security bits=128: yes Security callback: Shared Signature Algorithm scheme=rsa_pkcs1_sha384, security bits=192: yes Security callback: Shared Signature Algorithm scheme=rsa_pkcs1_sha512, security bits=256: yes Security callback: Shared Signature Algorithm digest=SHA224, algorithm=ECDSA, security bits=112: yes Security callback: Shared Signature Algorithm digest=SHA224, algorithm=RSA, security bits=112: yes Security callback: Shared Signature Algorithm scheme=ecdsa_secp256r1_sha256, security bits=128: yes Security callback: Shared Signature Algorithm scheme=ecdsa_secp384r1_sha384, security bits=192: yes Security callback: Shared Signature Algorithm scheme=ecdsa_secp521r1_sha512, security bits=256: yes Security callback: Shared Signature Algorithm scheme=ed25519, security bits=128: yes Security callback: Shared Signature Algorithm scheme=ed448, security bits=224: yes Security callback: Shared Signature Algorithm scheme=rsa_pss_pss_sha256, security bits=128: yes Security callback: Shared Signature Algorithm scheme=rsa_pss_pss_sha384, security bits=192: yes Security callback: Shared Signature Algorithm scheme=rsa_pss_pss_sha512, security bits=256: yes Security callback: Shared Signature Algorithm scheme=rsa_pss_rsae_sha256, security bits=128: yes Security callback: Shared Signature Algorithm scheme=rsa_pss_rsae_sha384, security bits=192: yes Security callback: Shared Signature Algorithm scheme=rsa_pss_rsae_sha512, security bits=256: yes Security callback: Shared Signature Algorithm scheme=rsa_pkcs1_sha256, security bits=128: yes Security callback: Shared Signature Algorithm scheme=rsa_pkcs1_sha384, security bits=192: yes Security callback: Shared Signature Algorithm scheme=rsa_pkcs1_sha512, security bits=256: yes Security callback: Shared Signature Algorithm digest=SHA224, algorithm=ECDSA, security bits=112: yes Security callback: Shared Signature Algorithm digest=SHA224, algorithm=RSA, security bits=112: yes 80829156977F0000:error:0A000076:SSL routines:tls_choose_sigalg:no suitable signature algorithm:ssl/t1_lib.c:3786: