iOS security bug – TLS mutual-auth fails with client elliptic curve keys

Re:iOS security bug – TLS mutual-auth fails with client elli... by mdriley on Tuesday April 01, 2014 @06:07PM (#7512075)

This is a bug in NSS. Here's the corresponding bug I filed against Chromium: https://code.google.com/p/chromium/issues/detail?id=349775

[ Parent | on HN ]

Re:iOS security bug – TLS mutual-auth fails with client elli... by tptacek on Tuesday April 01, 2014 @09:24PM (#7512978)

Wait, nobody does ECC client certificate TLS right?

[ Parent | on HN ]

Re:iOS security bug – TLS mutual-auth fails with client elli... by davidben on Wednesday April 02, 2014 @09:51AM (#7515473)

It's been fixed, but that was a bug in Chrome's NSS glue between NSS and the OS X native key store. (The fix is under third_party/nss, but no one else carries that particular file.) As far as I know, it works fine on other platforms and in NSS itself.

[ Parent | on HN ]