1943962 - selfserv: add support for zlib certificate compression

Status: RESOLVED FIXED

(NSS :: Tools, enhancement)

Description

[fkrenzel]

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0

Steps to reproduce:

Tried to run selfserve with zlib certificate compression enabled.

Actual results:

selfserve does not yet have a flag to enable zlib certificate compression.

Expected results:

The support should be added so that we have both server(selfserve) and client(tstcln) supporting in so that we can crosscheck.

Comment 1

[fkrenzel]

I am actually already working on this. please assign me to the bug.

Comment 2

[Anna Weine]

Great, feel free to put me as the reviewer when the patch is ready :)

Comment 3

[fkrenzel]

Attachment: Bug 1943962 - selfserv: Add support for zlib certificate compression. r=nkulatova

Comment 4

[fkrenzel]

remove need info

Comment 5

[fkrenzel]

FIY: I have tested the implementation against the tstclnt utility both with zlib enabled, and the server requesting a client certificate. This verifies both sending and receiving of certificates, additionally the selfserv was tested against tlsfuzzer.

Comment 6

[fkrenzel]

nss-try: https://treeherder.mozilla.org/jobs?repo=nss-try&revision=1b146eff5215a5437087e69afbfa1ad7ecaf7fde

Comment 7

[Anna Weine]

You can copy the nss-try link to the patch - https://phabricator.services.mozilla.com/D235746

You click on the Edit Revision and there will be Test Plan

Comment 8

[fkrenzel]

Thanks Anna,

Do i past it in the same format, if not please let me know

Comment 9

[BugBot [:suhaib / :marco/ :calixte]]

There is an r+ patch which didn't land and no activity in this bug for 2 weeks.
:fkrenzel, could you have a look please?
If you still have some work to do, you can add an action "Plan Changes" in Phabricator.
For more information, please visit BugBot documentation.

Comment 10

[John Schanck [:jschanck]]

https://hg.mozilla.org/projects/nss/rev/c3b9b2eb6548b541c7a095eebd1045cf7039ae3f
3.111