profile
viewpoint

Ask questionsTLS 1.0 support

https://deno.land/x/install/install.ps1 redirects to https://raw.githubusercontent.com/denoland/deno_install/master/install.ps1:

$ curl -I https://deno.land/x/install/install.ps1 | grep Location:
Location: https://raw.githubusercontent.com/denoland/deno_install/master/install.ps1

deno.land does not work with TLS 1.0.

$ curl --tls-max 1.2 https://deno.land/x/install/install.ps1
$ curl --tls-max 1.0 https://deno.land/x/install/install.ps1
-curl: (35) error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure

However, raw.githubusercontent.com works fine with TLS 1.0.

$ curl --tls-max 1.2 https://raw.githubusercontent.com/denoland/deno_install/master/install.ps1
$ curl --tls-max 1.0 https://raw.githubusercontent.com/denoland/deno_install/master/install.ps1

There have been a number of issues because PowerShell <v6 uses TLS 1.0 by default.

For example:

  • https://github.com/denoland/deno_install/issues/51
  • https://github.com/denoland/deno_install/issues/16
  • https://github.com/denoland/deno/issues/1729

The default PowerShell version for Windows 8 is v4, for Windows 10 it is v5. So this impacts nearly all PowerShell users.

The following fixes are possible:

  • (1) Changing the one-line install command to use TLS 1.2
[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; iwr https://deno.land/x/install/install.ps1 | iex
  • (2) Changing the one-line install command to point directly to GitHub
iwr https://raw.githubusercontent.com/denoland/deno_install/master/install.ps1 | iex
  • (3) Enabling TLS 1.0 for deno.land

cc @ry

denoland/deno_install

Answer questions MarkTiedemann

@ry Any chance we can enable TLS 1.0 for deno.land in CloudFront? This is still an issue.

$ curl --tlsv1.0 https://deno.land/x/install/install.ps1
-curl: (35) error:14004410:SSL routines:CONNECT_CR_SRVR_HELLO:sslv3 alert handshake failure
useful!

Related questions

No questions were found.
source:https://uonfu.com/
Github User Rank List