cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: [PATCH 3/3] nss: allow to enable/disable new AES GCM cipher-suites

From: Fabian Frank <fabian.frank.de_at_gmail.com>
Date: Fri, 14 Mar 2014 16:42:51 -0700

lastly, also +1.

I'm sorry, I can't merge it. But I'm sure Daniel will. :-)

Thanks,
Fabian

On Mon, Mar 10, 2014 at 5:44 AM, Kamil Dudka <kdudka_at_redhat.com> wrote:

> ... if built against a new enough version of NSS
> ---
> lib/vtls/nss.c | 10 ++++++++++
> 1 files changed, 10 insertions(+), 0 deletions(-)
>
> diff --git a/lib/vtls/nss.c b/lib/vtls/nss.c
> index 119a910..80e26e2 100644
> --- a/lib/vtls/nss.c
> +++ b/lib/vtls/nss.c
> @@ -165,6 +165,16 @@ static const cipher_s cipherlist[] = {
> {"ecdhe_ecdsa_aes_128_cbc_sha_256",
> TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256},
> {"ecdhe_rsa_aes_128_cbc_sha_256",
> TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256},
> #endif
> +#ifdef TLS_RSA_WITH_AES_128_GCM_SHA256
> + /* AES GCM cipher suites in RFC 5288 and RFC 5289 */
> + {"rsa_aes_128_gcm_sha_256", TLS_RSA_WITH_AES_128_GCM_SHA256},
> + {"dhe_rsa_aes_128_gcm_sha_256",
> TLS_DHE_RSA_WITH_AES_128_GCM_SHA256},
> + {"dhe_dss_aes_128_gcm_sha_256",
> TLS_DHE_DSS_WITH_AES_128_GCM_SHA256},
> + {"ecdhe_ecdsa_aes_128_gcm_sha_256",
> TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256},
> + {"ecdh_ecdsa_aes_128_gcm_sha_256",
> TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256},
> + {"ecdhe_rsa_aes_128_gcm_sha_256",
> TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256},
> + {"ecdh_rsa_aes_128_gcm_sha_256",
> TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256},
> +#endif
> };
>
> static const char* pem_library = "libnsspem.so";
> --
> 1.7.1
>
> -------------------------------------------------------------------
> List admin: http://cool.haxx.se/list/listinfo/curl-library
> Etiquette: http://curl.haxx.se/mail/etiquette.html
>

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2014-03-15