send extensions, even if we support all the currently specified curves
(NSS_ECC_MORE_THAN_SUITE_B is set). r=agl,rrelyea.
Modified Files:
ssl3con.c sslcon.c
git-svn-id: svn://10.0.0.236/trunk@264767 18797224-902f-48f8-a5cc-f745e15eee43
strsclnt with SSL2 enabled, so I need to fix that first.
Modified Files:
ssl3con.c sslcon.c
git-svn-id: svn://10.0.0.236/trunk@264747 18797224-902f-48f8-a5cc-f745e15eee43
even if we support all the currently specified curves
(NSS_ECC_MORE_THAN_SUITE_B is set). r=agl,rrelyea.
Modified Files:
ssl3con.c sslcon.c
git-svn-id: svn://10.0.0.236/trunk@264744 18797224-902f-48f8-a5cc-f745e15eee43
macAlg because it is a PKCS #11 MAC mechanism. r=rrelyea.
Modified Files:
lib/softoken/sftkhmac.c lib/ssl/ssl3con.c lib/util/pkcs11n.h
git-svn-id: svn://10.0.0.236/trunk@264704 18797224-902f-48f8-a5cc-f745e15eee43
Remove the workaround from ssl3_ComputeRecordMACConstantTime. The patch is
contributed by Adam Langley <agl@chromium.org>. r=rrelyea,wtc.
Modified Files:
lib/freebl/hmacct.c lib/softoken/sftkhmac.c lib/ssl/ssl3con.c
git-svn-id: svn://10.0.0.236/trunk@264696 18797224-902f-48f8-a5cc-f745e15eee43
of SSLv3 and TLS CBC records constant time. Without this, a timing side
channel can be used to build a padding oracle and mount Vaudenay's attack.
The patch is contributed by Adam Langley <agl@chromium.org>.
r=rrelyea,ryan.sleevi.
Modified Files:
lib/freebl/blapi.h lib/freebl/ldvector.c lib/freebl/loader.c
lib/freebl/loader.h lib/freebl/manifest.mn lib/freebl/md5.c
lib/freebl/rawhash.c lib/freebl/sha512.c lib/freebl/sha_fast.c
lib/freebl/sha_fast.h lib/nss/nss.def lib/pk11wrap/pk11obj.c
lib/pk11wrap/pk11pub.h lib/softoken/manifest.mn
lib/softoken/pkcs11.c lib/softoken/pkcs11c.c
lib/softoken/pkcs11i.h lib/ssl/ssl3con.c lib/util/hasht.h
lib/util/pkcs11n.h
Added Files:
lib/freebl/hmacct.c lib/freebl/hmacct.h
lib/softoken/sftkhmac.c
git-svn-id: svn://10.0.0.236/trunk@264692 18797224-902f-48f8-a5cc-f745e15eee43
extension has been negotiated. The patch is contributed by Adam Langley
<agl@chromium.org>. r=wtc.
git-svn-id: svn://10.0.0.236/trunk@264417 18797224-902f-48f8-a5cc-f745e15eee43
the initial ClientHello to work around a Windows SChannel bug.
r=ryan.sleevi,bsmith.
git-svn-id: svn://10.0.0.236/trunk@264269 18797224-902f-48f8-a5cc-f745e15eee43
from the heap after bug 793033 is fixed. r=ekr.
Modified Files:
dtlscon.c ssl3con.c sslimpl.h
git-svn-id: svn://10.0.0.236/trunk@264267 18797224-902f-48f8-a5cc-f745e15eee43
default. Enable the non-ECC Triple DES and AES cipher suites by default.
Enable SSL_RSA_WITH_RC4_128_SHA and SSL_RSA_WITH_RC4_128_MD5 by default.
r=rrelyea.
git-svn-id: svn://10.0.0.236/trunk@264251 18797224-902f-48f8-a5cc-f745e15eee43
system NSS packages are sometimes incorrectly built against an NSPR version
newer than the required NSPR version specified in the NSS package metainfo.
Modified Files:
lib/ssl/ssl.h lib/nss/nss.h lib/nss/nssinit.c
lib/smime/smime.h
git-svn-id: svn://10.0.0.236/trunk@264234 18797224-902f-48f8-a5cc-f745e15eee43
to at most { 3, 1 } (TLS 1.0) if we don't know what protocol version the
server supports. r=bsmith.
Modified Files:
dtlscon.c ssl3con.c sslimpl.h
git-svn-id: svn://10.0.0.236/trunk@264158 18797224-902f-48f8-a5cc-f745e15eee43
r wtc Patches 1 and 4 in the original bug (lib/softoken lib/freebl, and lib/ssl)
git-svn-id: svn://10.0.0.236/trunk@263930 18797224-902f-48f8-a5cc-f745e15eee43
file. The patch is contributed by Adam Langley <agl@chromium.org>. r=wtc.
git-svn-id: svn://10.0.0.236/trunk@263929 18797224-902f-48f8-a5cc-f745e15eee43
out from behind the TRACE and DEBUG defines and add a new CLIENT_RANDOM
format to support ECDHE-RSA key agreement (and others). The patch is
contributed by Adam Langley <agl@chromium.org>. r=wtc.
Modified Files:
ssl3con.c sslsock.c
git-svn-id: svn://10.0.0.236/trunk@263919 18797224-902f-48f8-a5cc-f745e15eee43
Remove nsskea.c and rename the ssl_FindCertKEAType function in sslsecur.c
to NSS_FindCertKEAType. r=emaldona.
Modified Files:
manifest.mn sslimpl.h sslsecur.c
Removed Files:
nsskea.c
git-svn-id: svn://10.0.0.236/trunk@263854 18797224-902f-48f8-a5cc-f745e15eee43
certificate_authorities list. The patch is contributed by Eric Rescorla
<ekr@rtfm.com>. r=wtc,bsmith,rrelyea.
Modified Files:
ssl3con.c sslerr.h
git-svn-id: svn://10.0.0.236/trunk@263794 18797224-902f-48f8-a5cc-f745e15eee43
