1304924 - Report key exchange group and server signature scheme in channel info

Status: RESOLVED FIXED

(NSS :: Libraries, defect)

Description

[Martin Thomson [:mt:]]

These are no longer part of the cipher suite, so users of TLS 1.3 have less information than they had before.  We can make that more by adding these two fields.

We might as well report these for other versions at the same time.

The only question I have is whether we need to include string values for these as well.

Comment 1

[Martin Thomson [:mt:]]

Review at https://nss-dev.phacility.com/D37

Comment 3

[Martin Thomson [:mt:]]

Minor incremental part landed: https://hg.mozilla.org/projects/nss/rev/edecfb87990f

Comment 4

[Chris Newman]

The primary value of this information is for logging or metrics gathering purposes, which means having a simple way to get a human readable string makes the API better.

Comment 5

[Eric Rescorla (:ekr)]

I would propose that we have code->string translators rather than clutter up the structures

Comment 6

[Martin Thomson [:mt:]]

https://hg.mozilla.org/projects/nss/rev/adc3e36d504614bb50116165b1b6631a6ea2bb2f