Re: 'No shared cipher error' connecting to OpenSSL server with Firefox using TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (0xc00a) cipher suite

2010-07-09 Thread Alex Birkett
do not see any mention of 160 bit curves mentioned in my ff-3 install. > Although it might be there under a name I don't recognize. > > Mike > > > > Bye > > Dirk > > > > Alex Birkett wrote: > > > Hi, > > > > > > Firefox 3.6.2

Re: 'No shared cipher error' connecting to OpenSSL server with Firefox using TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (0xc00a) cipher suite

2010-07-08 Thread Alex Birkett
he handshake still successful? Check the ciphersuite-id that s_client > sends. Obviously it's different from those that ff sends. > > Now lookup the ciphersuite-ids in the specification and you see which > ciphersuites ff and s_client indeed send. > > HTH, > Patrick Eisenacher >

Re: 'No shared cipher error' connecting to OpenSSL server with Firefox using TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (0xc00a) cipher suite

2010-07-08 Thread Alex Birkett
Hi Alex, > > just check the list of ciphersuites that FF sends in its client hello > message and you'll see which ciphersuites FF supports. > > HTH, > Patrick Eisenacher > > -Original Message- > *From:* Alex Birkett > > Hi, > > Firefox 3.6.2 supp

'No shared cipher error' connecting to OpenSSL server with Firefox using TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (0xc00a) cipher suite

2010-07-08 Thread Alex Birkett
Hi, Firefox 3.6.2 supports the TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA cipher suite. I've configured Open SSL (version 1.0.0.a) as a test server with what I think is a suitable ECC key/certificate (attached) The keys were created with the attached script. The server was started like this: openssl s