1304301 - PK11_ImportPublicKey will import ECDH keys that aren't supported

Status: NEW

(NSS :: Libraries, defect, P3)

Description

[Martin Thomson [:mt:]]

With only softoken installed, a sect283r1 public key can be successfully installed, even when softoken doesn't actually support that curve.  The same is true for a couple of other curves too.

Comment 1

[Jaime Hablutzel]

Is this bug confirmed?. I think that I've just stumbled upon it when importing a SSL client certificate with a sect283r1 key where the import operation didn't produce any warning but the client authentication itself failed without a clear error indication, just the client closing the connection abruptly.