Verify (and add if missing) TLS 1.3 support

[Lorak-mmk]

One of things missing from old cpp-driver is support of TLS 1.3. We have to investigate if this already works here. If it doesn't, we need to make it work.
In both cases we should add tests for that.

[Lorak-mmk]

I tested TLS 1.3 with both cpp-driver and cpp-rs-driver. Here are all the relevant files:

tls_1_3.zip

In both cases I used latest binary release downloaded from Github. libs folder contains those binaries and headers, and in case of cpp-driver the old version of openssl (because I can't run it with the version on my machine).

I generated certs and started the cluster using setup.sh script. Cluster setup allows only TLS1.3 connections, because of priority string (NORMAL:-VERS-ALL:+VERS-TLS1.3).
The code of example application is in main.cpp. It can be build / run using build-cpp / build-rs / run-cpp / run-rs Makefile targets.

Result: cpp-rs-driver connects successfully, cpp-driver does not.

I don't think there is anything special that we do, both drivers just use openssl. My guess is that if cpp-driver was rebuilt with recent version of openssl, it would work as well, but I did not test that.

@wprzytula Is there working infrastructure in cpp-rs-driver integration tests that would allow me to add TLS1.3 test? I remember that SSL tests don't currently work, but want to make sure.

[Lorak-mmk]

I tried with cpp-driver built from source. I had to install openssl-devel-engine package, otherwise it doesn't build. It looks like openssl/engine.h that cpp-driver uses is deprecated and will be removed in the future.

With cpp-driver built this way, it connected to cluster (using TLS1.3) with no issues.

[dkropachev]

I tried with cpp-driver built from source. I had to install openssl-devel-engine package, otherwise it doesn't build. It looks like openssl/engine.h that cpp-driver uses is deprecated and will be removed in the future.

With cpp-driver built this way, it connected to cluster (using TLS1.3) with no issues.

Thanks, so we can close it.

[Lorak-mmk]

It would be great to have a test for it, so lets wait for @wprzytula response.

[wprzytula]

@wprzytula Is there working infrastructure in cpp-rs-driver integration tests that would allow me to add TLS1.3 test? I remember that SSL tests don't currently work, but want to make sure.

We do have TLS tests running.

The following tests are enabled in CI:

• for Cassandra:
  :SslClientAuthenticationTests*:SslNoClusterTests*:SslNoSslOnClusterTests*:SslTests*\
• for ScyllaDB:
  :SslNoClusterTests*:SslNoSslOnClusterTests*\