any subtleties about OCSP in TLS1.3 with ecdh curves?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Node.js has a bug report and repro of ocsp status not being sent from
a node server to the openssl CLI when TLS1.3 is being used, but only
when server is setting an ecdh curve, with SSL_CTX_set1_curves_list()

repro is https://github.com/sam-github/node-ocsp-bug-repro

TLS trace of success is
https://github.com/sam-github/node-ocsp-bug-repro/blob/master/ok.txt,
and of failure is
https://github.com/sam-github/node-ocsp-bug-repro/blob/master/notok.txt

I hacked up node a bit, and it does look like in both cases the same
API interactions between node and openssl are ocurring, at least with
respect to the cb from SSL_set_cert_cb() is happening, after which
time we save some data, and then we call
SSL_set_tlsext_status_ocsp_resp() with that data.

AFAICT, with SSL_CTX_set1_curves_list() called, the ocsp data never
shows up in the server response.

I'm not sure what to look at next, does anybody have ideas?


Thanks,
Sam



[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]

  Powered by Linux