1427921 - Update TLS 1.3 to draft-23

Status: RESOLVED FIXED

(NSS :: Libraries, enhancement)

Description

[Martin Thomson [:mt:]]

draft-23 will include two changes:

 - renumbering key_share to 51
 - a new extension signature_algorithms_cert (50)

We can get by in the short term with ignoring signature_algorithms_cert, because we currently ignore signature algorithms on the certificate chain.  But we really need to support the key_share change.

Comment 1

[Martin Thomson [:mt:]]

Part 1 - https://hg.mozilla.org/projects/nss/rev/5a07078fb33827a3dec05f64a12690a0be789fa3

Comment 2

[Phabricator Automation]

Comment on attachment 8940007 [details]
Bug 1427921 - RSA-PSS codepoints for TLS 1.3 draft-23, r?ekr

Eric Rescorla (:ekr) has approved the revision.

https://phabricator.services.mozilla.com/D355#8774

Comment 3

[Martin Thomson [:mt:]]

https://hg.mozilla.org/projects/nss/rev/1dd546143b8f28c1090bf78c1d7ba941d2c81e60

Comment 4

[Martin Thomson [:mt:]]

Note that the second change is in 3.36.  I won't backport that change because it doesn't have any material effect on code, it's just renaming and we will do better not having that sort of change in 3.35.

Comment 5

[Phabricator Automation]

Attachment: Bug 1427921 - Update to TLS 1.3 draft-23, r?ekr

Comment 6

[Phabricator Automation]

Comment on attachment 8945495 [details]
Bug 1427921 - Update to TLS 1.3 draft-23, r?ekr

Eric Rescorla (:ekr) has approved the revision.

https://phabricator.services.mozilla.com/D352

Comment 7

[Martin Thomson [:mt:]]

Just landed an addendum that restores PSS support.

https://hg.mozilla.org/projects/nss/rev/7a5ecfb8bf8c