516913 - Support for Additional SEED Cipher Suites to TLS RFC4162

Status: RESOLVED WONTFIX

(NSS :: Libraries, enhancement, P3)

Description

[bluecey]

User-Agent:       Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; SLCC1; .NET CLR 2.0.50727; InfoPath.2; .NET CLR 3.5.21022; OfficeLiveConnector.1.4; OfficeLivePatch.0.0; .NET CLR 3.5.30729; .NET CLR 3.0.30618)
Build Identifier: 

After creating TLS_RSA_WITH_SEED_CBC_SHA(BUG 478839), we recently created a new patch including TLS_RSA_WITH_SEED_CBC_SHA, TLS_DHE_DSS_WITH_SEED_CBC_SHA and
TLS_DHE_RSA_WITH_SEED_CBC_SHA.

This is an additional process for enabling two the ciphersuites.

Reproducible: Didn't try

Comment 1

[bluecey]

Attachment: Patch V1

Comment 2

[Nelson Bolyard (seldom reads bugmail)]

Comment on attachment 400965 [details] [diff] [review]
Patch V1

This patch modifies files in two different Mozilla source code modules which have two separate sets of reviewers.  I will review the part of this patch that touches files in the NSS source code module.  Then, if it passes that review, I will ask for a separate review of the patch to the PSM files.

Comment 3

[Nelson Bolyard (seldom reads bugmail)]

I confirm that this is an enhancement request. :)

Comment 4

[bluecey]

Attachment: Patch V2

I'm so sorry.  We have some problem in patch file, line 90-91. So we upload the new patch file.

Comment 5

[Nelson Bolyard (seldom reads bugmail)]

Comment on attachment 401167 [details] [diff] [review]
Patch V2

OK, I'll ask myself to review this patch instead. 
I'm glad you're testing your patch!

Comment 6

[Nelson Bolyard (seldom reads bugmail)]

Comment on attachment 401167 [details] [diff] [review]
Patch V2

This patch includes parts for NSS and parts for PSM.
The parts for PSM should be attached to a separate bug that should be filed against product Core, component security/PSM.  
This review is only for the parts of this patch that are for NSS.

This patch is fine, as far as it goes, but it does not add any testing of the new cipher suites to the testing scripts. 
This patch does not need to be resubmitted, but an additional patch that adds testing to the SSL test script must be submitted before this can be committed.  

r=nelson for 3.13, conditional upon the subsequent submission and approval of a patch for the test script(s).

Comment 7

[Lee,Hosub]

Attachment: Patch V3

In Patch V3, The part related PSM has been deleted from Patch V2.
We will submit new bug for another part of this patch.

Comment 8

[Nelson Bolyard (seldom reads bugmail)]

Lee Hosub & Bluecey,
This bug has been waiting for 6 months now for one of you to attach a patch
to it that will test the new cipher suites in the NSS SSL test script(s). 
We won't commit the patch to add the new cipher suites until we know they're
being tested and passing the tests.

Comment 9

[J.C. Jones [:jcj] (he/him)]

SEED was marked deprecated in https://hg.mozilla.org/projects/nss/rev/d2cfb4ccdf167e5ea06d2bb5bc39c50f789929c8