Re: [Jessie-discuss] 0.9.7 + Mozilla/OpenSSL working - 1.0.0/CVS still nothing

[Martin Egholm Nielsen]

Hi,

> It seems that Jessie/GNU-Crypto doesn't work well with e.g. 
> "TLS_DHE_RSA_WITH_AES_256_CBC_SHA", whereas "SSL_RSA_WITH_RC4_128_MD5" 
> does.
> There are quite some more suites that doesn't work (or maybe just takes 
> so much computational handshake time, that Mozilla times out)...
For Mozilla (1.7.6 at least) these are the suites that need being 
disabled (source snippet from where I ignore those suites):
      if (allCiphers[i].endsWith("_DHE_RSA_WITH_AES_256_CBC_SHA") ||
          allCiphers[i].endsWith("_DHE_RSA_WITH_AES_128_CBC_SHA") ||
          allCiphers[i].endsWith("_DHE_RSA_WITH_3DES_EDE_CBC_SHA") ||
          allCiphers[i].endsWith("_DHE_RSA_WITH_DES_CBC_SHA"))

// Martin