Commit d1f1c857 authored by Kamil Dudka's avatar Kamil Dudka
Browse files

nss: add chacha20-poly1305 cipher suites if supported by NSS

parent 049aa925

RELEASE-NOTES

+1 −1
Original line number Diff line number Diff line
@@ -8,7 +8,7 @@ Curl and libcurl 7.51.0 


This release includes the following changes:



 o

 o nss: additional cipher suites are now accepted by CURLOPT_SSL_CIPHER_LIST



This release includes the following bugfixes:

lib/vtls/nss.c

+9 −0
Original line number Diff line number Diff line
@@ -189,6 +189,15 @@ static const cipher_s cipherlist[] = { 
  {"ecdhe_ecdsa_aes_256_gcm_sha_384", TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384},

  {"ecdhe_rsa_aes_256_gcm_sha_384",   TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384},

#endif

#ifdef TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256

  /* chacha20-poly1305 cipher suites */

 {"ecdhe_rsa_chacha20_poly1305_sha_256",

     TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256},

 {"ecdhe_ecdsa_chacha20_poly1305_sha_256",

     TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256},

 {"dhe_rsa_chacha20_poly1305_sha_256",

     TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256},

#endif

};



static const char* pem_library = "libnsspem.so";