1. Forum
  2. fsxNet
  3. FSX NET

  • List of known TLS nodes

    From Oli@21:3/102 to All on Mon Apr 13 12:47:48 2020
    List of known TLS nodes

    TLS Version
    Node Port In Out
    21:1/100 :24553 1.2 1.2 weakCert
    21:2/100 :24553 1.2 1.2 weakCert
    21:2/116 :24553 1.2 1.2
    21:3/100 :24556 1.2 1.3
    21:3/102 :24553 1.3 1.3 noSNI
    21:4/100 :24553 1.2 1.2 weakCert
    21:4/106 :24553 1.2 1.3
    21:4/122 :24553 1.2 1.2


    weakCert: RSA 1536 bit, deprecated crypto and refused by OpenSSL in Debian/Ubuntu

    noSNI: Server refuses connections with an unencrypted servername (SNI extension). Client doesn't send servername.
    Use -nosevername with openssl and --disable-sni with gnutls-cli.


    To connect to a TLS node with binkd uou can use the gnutls-cli or openssl command line utility with the -pipe parameter, e.g.:

    node 21:99/999@fsxnet -pipe "gnutls-cli --logfile /dev/null --no-ca-verification --disable-sni *H:24553"
    or
    node 21:99/999@fsxnet -pipe "openssl s_client -quiet -noservername -connect *H:24553"

    The -pipe parameter is documented in the sample binkd.cfg file. If you get a garbled command line, please upgrade to binkd 1.1a-101 or later.

    In Debian/Ubuntu gnutls-cli is included in gnutls-bin package, openssl in the openssl package.

    ---
    * Origin: (21:3/102)