[Pidgin] #15909: [Patch] Support TLS 1.1/1.2 on NSS

Pidgin trac at pidgin.im
Wed Feb 26 16:24:54 EST 2014


#15909: [Patch] Support TLS 1.1/1.2 on NSS
-------------------------+------------------------
 Reporter:  elrond       |       Owner:
     Type:  patch        |      Status:  new
Milestone:  2.10.10      |   Component:  libpurple
  Version:  2.10.8       |  Resolution:
 Keywords:  ssl tls nss  |
-------------------------+------------------------

Comment (by elrond):

 Replying to [comment:15 deryni]:
 > elrond do you know if there is a way to translate those min/max numbers
 into "human"? That would be a lot more useful in the log than the raw
 numbers.

 I have searched around the nss sources, and didn't find anything useful,
 sadly. What I have found, are some {{{#define}}}s in
 {{{/usr/include/nss/sslproto.h}}}:

 {{{
 /* All versions less than 3_0 are treated as SSL version 2 */
 #define SSL_LIBRARY_VERSION_2                   0x0002
 #define SSL_LIBRARY_VERSION_3_0                 0x0300
 #define SSL_LIBRARY_VERSION_TLS_1_0             0x0301
 #define SSL_LIBRARY_VERSION_TLS_1_1             0x0302
 #define SSL_LIBRARY_VERSION_TLS_1_2             0x0303
 }}}

 Note that for older nss versions, the later ones (1.2 and/or 1.1) do not
 exist as defines. So code using this should be carefully #ifdef'd.

 That said, I'd recommend to dump those version numbers in hex. That's not
 great, but anyone having ever seen those things in wireshark will
 understand them.

-- 
Ticket URL: <https://developer.pidgin.im/ticket/15909#comment:18>
Pidgin <https://pidgin.im>
Pidgin


More information about the Tracker mailing list