tor/changes/bug29241 at 5cb94cbf9d89804ea37a2f1e68d354a86edb223e - tor - Gitea: Git with a cup of darkness

torproject/tor

mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-12-06 19:41:15 +01:00

Files

T

Nick Mathewson 5cb94cbf9d NSS: disable TLS1.2 SHA-384 ciphersuites.

In current NSS versions, these ciphersuites don't work with
SSL_ExportKeyingMaterial(), which was causing relays to fail when
they tried to negotiate the v3 link protocol authentication.

Fixes bug 29241; bugfix on 0.4.0.1-alpha.

2019-04-06 11:06:34 +10:00

7 lines

362 B

Plaintext

Raw Blame History

   o Major bugfixes (NSS, relay):
     - When running with NSS, disable TLS 1.2 ciphersuites that use SHA384
       for their PRF. Due to an NSS bug, the TLS key exporters for these
       ciphersuites don't work -- which caused relays to fail to handshake
       with one another when these ciphersuites were enabled.
       Fixes bug 29241; bugfix on 0.4.0.1-alpha.