<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">Hello CS,<div>It is helpful to know which version of Kea you are using. Based upon your earlier thread, assuming you are running Kea 2.2.0?</div><div><br></div><div>As noted in the Kea documentation, TLS support is provided by the underlying crypto library used to build your package of Kea. See https://kea.readthedocs.io/en/kea-2.4.1/arm/security.html. TLS 1.3 is supported when built with appropriate version of crypto library.</div><div><br></div><div>Assuming Kea DHCP server and kea-shell are able to communicate with your CA over TLS and issue is limited to the micetro client. While micetro capabilities is not a topic for this mailing list, you may want to verify that micetro supports TLS connections to the Kea CA (or run a packet capture to see if using HTTPS and TLS version supported by client). I believe the same/similar error occurs if the client attempts to connect via non-TLS/plain HTTP to a CA configured to use TLS.</div><div><br></div><div><br id="lineBreakAtBeginningOfMessage"><div><br><blockquote type="cite"><div>On Dec 28, 2023, at 5:07 PM, CS <cs.temp.mail@gmail.com> wrote:</div><br class="Apple-interchange-newline"><div><div dir="ltr">Hey, <div>Trying to associate my kea instance with micetro but when addinging it logs the following error:<br></div><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><div>HTTP_CONNECTION_HANDSHAKE_FAILED TLS handshake with x.x.x.x failed with wrong version number</div></blockquote><div>While this may be a problem to be solved on the micetro side, not here with ya'll, kea is the one with the best error (Micetro just says: "Unable to connect") and only asks for a hostname or ip address (refusing any elaborations like https) </div><div><br></div><div>This sounds like a TLS 1.0-1.3 issue to me. Any idea what kea CA is looking for?</div><br clear="all"><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><font face="courier new, monospace" color="#999999">CS, cs.Temp.Mail@gMail.com</font></div></div></div>
-- <br>ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.<br><br>To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.<br><br>Kea-users mailing list<br>Kea-users@lists.isc.org<br>https://lists.isc.org/mailman/listinfo/kea-users<br></div></blockquote></div><br></div></body></html>