Re: Ciphersuite Ordering (was Re: Firefox and ECC TLS ciphersuites)

2008-08-09 Thread Wan-Teh Chang
On Fri, Aug 8, 2008 at 1:12 PM, Nelson B Bolyard <[EMAIL PROTECTED]> wrote: > mozilla wrote, On 2008-08-08 12:31: >> Some have groused that the ordering of cipher suites has an bias against >> FIPS. For example, Camelia and RC4 seem to be prefered over AES. Is the >> rationale for the ordering docu

Re: Firefox and ECC TLS ciphersuites

2008-08-08 Thread Wan-Teh Chang
On Fri, Aug 8, 2008 at 12:18 PM, mozilla <[EMAIL PROTECTED]> wrote: > > Still not working in Fedora 8. The NSS libraries that come with Fedora or Red Hat Enterprise Linux do not implement ECC. You can download the Linux version of Firefox from www.mozilla.com directly. The Firefox build from www

Re: Ciphersuite Ordering (was Re: Firefox and ECC TLS ciphersuites)

2008-08-08 Thread Nelson B Bolyard
mozilla wrote, On 2008-08-08 12:31: > Some have groused that the ordering of cipher suites has an bias against > FIPS. For example, Camelia and RC4 seem to be prefered over AES. Is the > rationale for the ordering documented or explained somewhere? My guess is > that speed was a consideration.

Ciphersuite Ordering (was Re: Firefox and ECC TLS ciphersuites)

2008-08-08 Thread mozilla
Some have groused that the ordering of cipher suites has an bias against FIPS. For example, Camelia and RC4 seem to be prefered over AES. Is the rationale for the ordering documented or explained somewhere? My guess is that speed was a consideration. cipher_suites[34] = {

Re: Firefox and ECC TLS ciphersuites

2008-08-08 Thread mozilla
I am not concerned about FIPs for now. For Windows, The only version of softokn and freebl were in the Firefox program files. FF3 seems to work ok now on Windows. I don't recall doing anything other than rebooting Windows and restarting FF3. Still not working in Fedora 8. Except for copies in t

Re: Firefox and ECC TLS ciphersuites

2008-08-08 Thread mozilla
There is no LD_LIBRARY_PATH defined in the shell environment variable set. Again, I did not disable anything. "Wan-Teh Chang" <> wrote in message news:[EMAIL PROTECTED] > On Fri, Jul 25, 2008 at 2:49 PM, Nelson B Bolyard <[EMAIL PROTECTED]> > wrote: >> >> I suspect that it MAY be the case that t

Re: Firefox and ECC TLS ciphersuites

2008-08-08 Thread mozilla
Sorry I've been away. TLS 1.0 (and SSL 3.0) was definitely checked. I did not explicitly disable any cipher suites. The windows version of FF3 mysteriously seems to be working. May have needed a reboot/restart of Windows and/or Firefox. "Wan-Teh Chang" <[EMAIL PROTECTED]> wrote in message news

Re: Firefox and ECC TLS ciphersuites

2008-07-25 Thread Nelson B Bolyard
Wan-Teh Chang wrote, On 2008-07-25 15:07: > On Fri, Jul 25, 2008 at 2:49 PM, Nelson B Bolyard <[EMAIL PROTECTED]> wrote: >> I suspect that it MAY be the case that there are other copies of NSS on >> your system(s), and that those other copies are being used instead of >> the copies that were downlo

Re: Firefox and ECC TLS ciphersuites

2008-07-25 Thread Wan-Teh Chang
On Fri, Jul 25, 2008 at 2:49 PM, Nelson B Bolyard <[EMAIL PROTECTED]> wrote: > > I suspect that it MAY be the case that there are other copies of NSS on > your system(s), and that those other copies are being used instead of > the copies that were downloaded with FF3.x. Perhaps a change is needed

Re: Firefox and ECC TLS ciphersuites

2008-07-25 Thread Nelson B Bolyard
William Price wrote, on 2008-07-24 20:36: > [bp] I have built a version of NSS that supports ECC and it appears to be > working well. Glad to hear that. How did you test it? If you substituted your own build for the build that came with FF3, and found that it worked in FF3 and enabled ECC, that

Re: Firefox and ECC TLS ciphersuites

2008-07-25 Thread Nelson B Bolyard
Wan-Teh Chang wrote, On 2008-07-25 12:03: > On Fri, Jul 25, 2008 at 6:59 AM, mozilla <[EMAIL PROTECTED]> wrote: >> I expected FF3.0.1 to do TLS with the specific ECC ciphersuite that you >> identify. However, my FF3 is not offering the ECC suites in its client >> hello. I downloaded FF3.0.1 from th

Re: Firefox and ECC TLS ciphersuites

2008-07-25 Thread Wan-Teh Chang
On Fri, Jul 25, 2008 at 6:59 AM, mozilla <[EMAIL PROTECTED]> wrote: > I expected FF3.0.1 to do TLS with the specific ECC ciphersuite that you > identify. However, my FF3 is not offering the ECC suites in its client > hello. I downloaded FF3.0.1 from the mozilla.com site yesterday (7/24/08). I > jus

Re: Firefox and ECC TLS ciphersuites

2008-07-25 Thread mozilla
I expected FF3.0.1 to do TLS with the specific ECC ciphersuite that you identify. However, my FF3 is not offering the ECC suites in its client hello. I downloaded FF3.0.1 from the mozilla.com site yesterday (7/24/08). I just did the quick download without any custom configuration. (There should

RE: Firefox and ECC TLS ciphersuites

2008-07-25 Thread David Stutzman
> I'm trying to do TLS using an ECC ciphersuite. I thought FF3 natively > supported it (ECC ciphersuites are enabled in about:config). Using > normal downloads of FF3 on either Linux or Windows I'm getting the > error that there's no common ciphersuite. Looking at SSLTap, both > versions of FF3

Re: Firefox and ECC TLS ciphersuites

2008-07-24 Thread bp
See responses in line below. "Nelson B Bolyard" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > Bill Price wrote, On 2008-07-24 15:17 PDT: >> I'm trying to do TLS using an ECC ciphersuite. I thought FF3 natively >> supported it (ECC ciphersuites are enabled in about:config). Using no

Re: Firefox and ECC TLS ciphersuites

2008-07-24 Thread Nelson B Bolyard
Bill Price wrote, On 2008-07-24 15:17 PDT: > I'm trying to do TLS using an ECC ciphersuite. I thought FF3 natively > supported it (ECC ciphersuites are enabled in about:config). Using normal > downloads of FF3 on either Linux or Windows I'm getting the error that > there's no common ciphersuite.

Re: Firefox and ECC TLS ciphersuites

2008-07-24 Thread Nelson B Bolyard
Bill Price wrote, On 2008-07-24 15:17: > I'm trying to do TLS using an ECC ciphersuite. I thought FF3 natively > supported it (ECC ciphersuites are enabled in about:config). Using normal > downloads of FF3 on either Linux or Windows I'm getting the error that > there's no common ciphersuite. Lo