NSS: disable TLS1.2 SHA-384 ciphersuites.
commit5cb94cbf9d89804ea37a2f1e68d354a86edb223e
authorNick Mathewson <nickm@torproject.org>
Fri, 29 Mar 2019 17:38:48 +0000 (29 13:38 -0400)
committerteor <teor@torproject.org>
Sat, 6 Apr 2019 01:06:34 +0000 (6 11:06 +1000)
tree68a136432f97025a6bee3fd382bedfc66b460fec
parent680fd3f8fb7157432398a3552ee9c98c72bd7397
NSS: disable TLS1.2 SHA-384 ciphersuites.

In current NSS versions, these ciphersuites don't work with
SSL_ExportKeyingMaterial(), which was causing relays to fail when
they tried to negotiate the v3 link protocol authentication.

Fixes bug 29241; bugfix on 0.4.0.1-alpha.
changes/bug29241 [new file with mode: 0644]
src/lib/tls/tortls_nss.c