Support for TLS 1.3 in Pulsar CPP Client

Pulsar CPP client supports only TLS 1.2 for communication.
Reference:

pulsar-client-cpp/lib/ClientConnection.cc

Line 193 in a46da16

boost::asio::ssl::context ctx(boost::asio::ssl::context::tlsv12_client);

Pulsar CPP client needs to support TLS 1.3 in addition to TLS 1.2 for better security.

@BewareMyPower

@BewareMyPower : Any plans to support TLS 1.3 in near future release?

Sorry. There is no plan recently.

@armanjupriya-er did you try to modify the code and see if it can be smoothly upgrade? Any report on upgrading can help the upstream to handle this issue. Otherwise, you're waiting someone find spare time to figure out all the details by themseleves.

We've met this issue with a customer, whose network does deep packet inspection and somehow prevents TLSv1.2 connections to successfully do handshake. As 1.2 usage is hardcoded, pulsar connection was no longer possible from there. I've opened a PR (#529) and would be happy to get it evaluated to be incorporated in pulsar-client (we use python package).

Navigation Menu

Repository navigation

Support for TLS 1.3 in Pulsar CPP Client #172