fix(tls): allow TLS 1.2 for S7-1500 PLCs#763

Open

gijzelaerr wants to merge 10 commits into

fix/tls-1.2-s7-1500

Commits on Jul 6, 2026

fix(tls): allow TLS 1.2 for S7-1500 PLCs (#760)

gijzelaerr
and
claude
committed

Commits on Jul 7, 2026

fix(tls): disable post-quantum key exchange for S7 PLCs

gijzelaerr
and
claude
committed
fix(tls): cap at TLS 1.2 to avoid TLS 1.3 extensions that S7 PLCs reject

gijzelaerr
and
claude
committed
fix(tls): restrict cipher suites and extensions for S7 PLC compatibility

gijzelaerr
and
claude
committed
fix(tls): restrict signature algorithms and add RSA cipher fallback

gijzelaerr
and
claude
committed
fix(tls): add RSA cipher fallback and document sigalgs workaround

gijzelaerr
and
claude
committed
fix(tls): disable extended_master_secret extension for PLC compatibility

gijzelaerr
and
claude
committed

Commits on Jul 8, 2026

fix(tls): switch to RSA-only ciphers to eliminate EC extensions

gijzelaerr
and
claude
committed

Commits on Jul 10, 2026