CODEWITHSUNDEEP
ssllinkedin-apitls1.2tls1.3
Bodakiya Vishal
Bodakiya Vishal

Reputation: 97

Not able to use LinkedIn Post Inspector with TLS 1.3

I am trying to use LinkedIn post inspector with below URL: https://www.devrepublic.nl

This URL is running behind CloudFlare. When TLS is set to 1.2 then LinkedIn post inspector is working fine, but when it is set to 1.3 then it is not working.

I already tried to get help from LinkedIn support. They suggested some solution given in below links: https://www.linkedin.com/help/linkedin/answer/a521928?hcppcid=search https://www.linkedin.com/help/linkedin/answer/a525063?hcppcid=search

Everything is as expected and working fine when TLS is set to 1.2

At the end they suggested to get help from LinkedIn Developer Portal or LinkedIn’s Stack Overflow page. So, now I am posting my issue here.

I also tried to get help from CloudFlare and as a solution they mentioned that LinkedIn's scrapper bot doesn't support requests over TLS 1.3.

I also tried solutions form below link, it also not worked for me: https://www.linkedin.com/pulse/linkedin-open-graph-image-challenges-navigating-cloudflare-brits-7js1c

I also many other solutions given on Stack over flow, but nothing worked for me with TLS 1.3.

See below. with TLS 1.3: With TLS 1.3

Upvotes: -2

Views: 17

Answers (1)

Steffen Ullrich
Steffen Ullrich

Reputation: 123531

When targeting the LinkedIn post inspector to a site I control and then doing a packet capture I can see, that it only supports TLS 1.2 and not TLS 1.3:

enter image description here

This means it is impossible to use it against a site which does not support TLS 1.2. It is a limitation of the tool and you need to work around it by enabling TLS 1.2 at the TLS server side (i.e. Cloudflare in your case).

Note that you can have both TLS 1.2 and TLS 1.3 enabled at the server at the same time and it is also not a security problem to have TLS 1.2 enabled. Clients supporting TLS 1.3 will use TLS 1.3 this way, while older clients will use TLS 1.2. Clients not even supporting TLS 1.2 will fail.

Upvotes: 0

Related Questions