[erlang-bugs] Incomplete Elliptic Curve Cipher Suites in R16B01 and R16B02

Andrew Thompson andrew@REDACTED
Mon Oct 7 18:14:30 CEST 2013


On Mon, Oct 07, 2013 at 09:47:09AM +0200, Ingela Anderton Andin wrote:
>   "This section specifies a TLS extension that can be included with the
>    ServerHello message as described in [4  <http://tools.ietf.org/html/rfc4492#ref-4>], the Supported Point Formats
>    Extension.
> 
>    When this extension is sent:
> 
>    The Supported Point Formats Extension is included in a ServerHello
>    message in response to a ClientHello message containing the Supported
>    Point Formats Extension when negotiating an ECC cipher suite."

Yes, that is for the 'Supported Point Format Extension',
which the RFC says is fine to send in the ServerHello, but the RFC
doesn't say anything about the `Supported Elliptic Curves Extension`
being sent in a ServerHello, only in a ClientHello.

I'll try your patch, although I admit that the complexity of it is a
little beyond my understanding.

Andrew



More information about the erlang-bugs mailing list