topic Support for eliptic curve x25519 for inbound SSL decryption? in General Topics

Support for eliptic curve x25519 for inbound SSL decryption?

Maxstr — Wed, 27 Jun 2018 01:23:27 GMT

On PAN-OS 8.1.2 I'm getting decrypt-errors when decrypting inbound traffic. I ran a test using SSLabs.com, and I found that newer browsers are requesting x25519 and getting a handshake error. It's showing that only secp256r1 are secp384r1 are supported. Does 8.1 support x25519 or plan to support it?

Re: Support for eliptic curve x25519 for inbound SSL decryption?

OtakarKlier — Wed, 27 Jun 2018 17:13:39 GMT

Hello,

That sounds like a good question for your sales team. I personally do not have that info.

Regards,

Re: Support for eliptic curve x25519 for inbound SSL decryption?

Maxstr — Wed, 04 Jul 2018 21:29:44 GMT

It's a technical question for the Palo engineers

Re: Support for eliptic curve x25519 for inbound SSL decryption?

NickThen — Mon, 18 Mar 2019 17:50:08 GMT

Did you ever hear a response on this?