check if curl has newer tls options than --tlsv1.3

[phabricator-migrator]

Information

ID: 609
PHID: PHID-TASK-bcsxoocmpmnesipur34c
Author: Patrick
Status at Migration Time: resolved
Priority at Migration Time: Normal

Description

• grep Whonix code for --tlsv1.3 and upgrade if possible
• update Template:Curl Secure - Whonix

compare with curl manual page

Comments

---

HulaHoop

2017-01-18 16:30:21 UTC

[[ curl - How To Use | --tlsv1.3 ]] added in 7.52.0. Current Stretch version: 7.51.0-1. New version likely won’t make the freeze.

---

Patrick

2017-05-24 21:39:41 UTC

@torjunkie:

As an aside (all this talk of curl, scurl etc. was a reminder), as per that phabricator item (grep, code change), curl 7.52.1-5 is in stretch, so that should support tls v1.3 as you wanted i.e. as per man pages.

See here: https://packages.debian.org/stretch/curl

Package: curl (7.52.1-5)

Lucky we.

---

JasonJAyalaP

2017-06-02 16:42:01 UTC

I’ve updated that wiki page with 1.3

A grep of the whonix group page on github
(Whonix · GitHub)

only shows one repo, the binary for scurl:
https://github.com/Whonix/scurl/blob/master/usr/bin/scurl

which wraps curl with tls1.2

If 1.3 is suitable for Whonix 14, we can close this ticket. But it seems like we want to check for the latest support tls every new whonix version? I can create a ticket for Whonix 15 if so.