1532312 - post-handshake auth doesn't interoperate with OpenSSL

Status: RESOLVED FIXED

(NSS :: Libraries, enhancement)

Description

[Daiki Ueno [:ueno]]

I realized that the current implementation of post-handshake auth doesn't interoperate with OpenSSL, because of the wrong calculation of hash context after handshake (sorry about that).

It would be nice there is an automatic interoperability test, but for now I am adding a minimal support for post-handshake auth in selfserv/tstclnt to enable manual testing.

Comment 1

[Daiki Ueno [:ueno]]

Attachment: Bug 1532312, fix transcript-hash calculation after handshake

In post-handshake, Handshake Context should be:

ClientHello ... client Finished + CertificateRequest

while NSS continues feeding any handshake message after handshake.

Comment 2

[Daiki Ueno [:ueno]]

Attachment: Bug 1532312, add -E option to selfserv/tstclnt to enable post-handshake auth

Comment 3

[Daiki Ueno [:ueno]]

Attachment: Bug 1532312, recognize certificate_required alert

Some servers send a certificate_required alert when the client returns
no certificate while it is required. For server, it is not mandatory
to send this alert, but it could make it easier for the client to
distinguish bad_certificate and the declined cases.

Comment 4

[Daiki Ueno [:ueno]]

Pushed as:
https://hg.mozilla.org/projects/nss/rev/eb03936b42bb
https://hg.mozilla.org/projects/nss/rev/bb58098d38a5
https://hg.mozilla.org/projects/nss/rev/15905cd1cab9

Thank you Martin for the reviews!