TLS 1.3

[Chris]

Sorry for my being a noob and asking a lot of questions :(

What is a known working method to get TLS 1.3 working on Unbound with 
steps ?

Without compiling Unbound with ssl directory options, without compiling 
anything, then I would need to use symlinks ?

Install FreeBSD 12 A 7 or later  This comes with Openssl 1.0.x
pkg install openssl111-1.1.1_1
ln -s /usr/local/bin/openssl /usr/bin/openssl ?
ln -s /usr/local/include/openssl /usr/include/openssl ?
pkg install unbound-1.8.0 ?

Or do you want me to:
pkg install openssl111-1.1.1_1
unbound > ./configure --with-ssl=dir > make install

?



On 9/23/2018 6:10 AM, Jaap Akkerhuis wrote:
>   Chris writes:
>
>   > Hmmm... I did what was suggested below. No change in errors and warnings..
>   >
>   > I moved over to FreeBSD 12 Alpha 6 and did the same install and got the
>   > same errors. FreeBSD 12 Alpha 6 tho comes with Unbound 1.8.0 but is only
>   > OpenSSL 1.0.2p-freebsd and so does not have TLS 1.3
>   >
>   > So.. WHat I did in order.
>   >
>   > Install FreeBSD 12 A 6 on a clean HD in a AMD 64 based machine.
>   > wget OpenSSL-1.1.1
>   > ./config
>   > make install
>   > wget unbound-1.8.0
>   > ./configure --with-ssl=/usr/local/openssl-1.1.1
>
> Again use the FreeBSD port system, the latest openssl is in the
> ports.
>
> 	jaap
>