Skip to main content
Version: 0.1.24

TLS 1.1

TLS 1.1 API wrappers over the shared TLS 1.2-style context. Header: noxtls_tls11.h.

Deprecated and insecure

TLS 1.1 is deprecated and should not be used for new deployments. It is widely disabled by modern platforms and does not meet current best-practice security requirements.

Usage guidance​

  • Use TLS 1.1 only for temporary compatibility with legacy peers that cannot yet move forward.
  • Minimize scope and lifetime of any TLS 1.1 exception in production.
  • Plan migration to TLS 1.2 or TLS 1.3 as soon as possible.

Types​

tls11_context_t​

Alias of tls12_context_t specialized for TLS 1.1 operation.

API​

Core lifecycle and I/O​

  • tls11_context_init
  • tls11_context_free
  • tls11_connect
  • tls11_accept
  • tls11_send
  • tls11_recv
  • tls11_close

Client handshake steps​

  • tls11_send_client_hello
  • tls11_recv_server_hello
  • tls11_recv_certificate
  • tls11_recv_server_key_exchange
  • tls11_recv_server_hello_done
  • tls11_send_client_key_exchange
  • tls11_send_change_cipher_spec
  • tls11_send_finished
  • tls11_recv_change_cipher_spec
  • tls11_recv_finished

Server handshake steps​

  • tls11_recv_client_hello
  • tls11_send_server_hello
  • tls11_send_certificate
  • tls11_send_server_key_exchange
  • tls11_send_server_hello_done
  • tls11_recv_client_key_exchange
  • tls11_recv_change_cipher_spec_client
  • tls11_recv_finished_client
  • tls11_send_change_cipher_spec_server
  • tls11_send_finished_server

For shared structures and record constants, see TLS (common).