Closed Bug 1471970 Opened 6 years ago Closed 5 years ago

Post handshake authentication is unsupported

Categories

(NSS :: Libraries, defect)

3.38
defect
Not set
normal

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: hkario, Unassigned)

References

Details

Attachments

(1 file)

Using c84a61acb17d (few commits past 3.38)

When tstclnt is configured with TLS1.3 support and a certificate (-n nickname), the Client Hello message does not include the post_handshake_auth extension.

(I know that it's a known limitation, but I was unable to find any tracking bug for implementing it)
This adds handling of the post_handshake_auth extension in CH and exposes tls13_SendCertificateRequest as an experimental API.
QA Contact: franziskuskiefer
See Also: → 1511989
Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → FIXED
Target Milestone: --- → 3.43

see also: bug 1527958

Is there a bug filed against Firefox to add support for it, if it is needed?

Flags: needinfo?(dueno)

/me should really first check Blocks/Depends before asking questions

Flags: needinfo?(dueno)
Depends on: 1561523
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: