Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

"Data Transfer Interrupted" with websites offering only TLS 1.2 on SHA256/SHA384 #37

Open
creopard opened this issue Mar 27, 2019 · 3 comments

Comments

@creopard
Copy link

creopard commented Mar 27, 2019

Running RetroZilla 2.2 will not work on various websites offering only TLS 1.2 with newer cipher suites:
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (0xc027)
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f)
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (0xc028)
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030)
and just results in a "Data Transfer Interrupted" message.

Retrozilla 2.2 "only" supports according to ssllabs' clienttest
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013)
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xc014)
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (0xc00a)
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (0xc009)

Is there any chance to add support for TLS_ECDHE_RSA with SHA256 and/or SHA384

Here is a test website: https://www.serverprofis.de/ (SSL Report of that site)

@creopard creopard changed the title "Data Transfer Interrupted" with websites offering only TLS 1.2 "Data Transfer Interrupted" with websites offering only TLS 1.2 on SHA256/SHA384 Mar 27, 2019
@roytam1
Copy link
Contributor

roytam1 commented Dec 25, 2019

create 2 boolean entry named:
security.ssl3.ecdhe_ecdsa_aes_128_gcm_sha256
security.ssl3.ecdhe_rsa_aes_128_gcm_sha256

and set them to true.

@creopard
Copy link
Author

@roytam1: Thank you - it's working great.
Please consider adding these values with the next release of retrozilla!

@roytam1
Copy link
Contributor

roytam1 commented Jan 8, 2020

a pull request of default pref has been created: #40

and also SHA384 NSS code changes have their own pull request pending: #38

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants