9front - general discussion about 9front
 help / color / mirror / Atom feed
* '/mnt/web/bdy' 0 No status could not negotiate acceptable security parameters
@ 2016-01-20  2:39 sl
  2016-01-20  3:58 ` [9front] " Kurt H Maier
                   ` (2 more replies)
  0 siblings, 3 replies; 4+ messages in thread
From: sl @ 2016-01-20  2:39 UTC (permalink / raw)
  To: 9front

	https://www.devever.net/~hl/nosecuresmartphone
	https://thepiratebay.org

sl


^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: [9front] '/mnt/web/bdy' 0 No status could not negotiate acceptable security parameters
  2016-01-20  2:39 '/mnt/web/bdy' 0 No status could not negotiate acceptable security parameters sl
@ 2016-01-20  3:58 ` Kurt H Maier
  2016-01-20  7:04 ` cinap_lenrek
  2016-01-31 23:49 ` cinap_lenrek
  2 siblings, 0 replies; 4+ messages in thread
From: Kurt H Maier @ 2016-01-20  3:58 UTC (permalink / raw)
  To: 9front

On Tue, Jan 19, 2016 at 09:39:01PM -0500, sl@stanleylieber.com wrote:
> 	https://www.devever.net/~hl/nosecuresmartphone

this site only supports tls 1.2; the only cipher suites it seems to
support are TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 and
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384.  

khm


^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: [9front] '/mnt/web/bdy' 0 No status could not negotiate acceptable security parameters
  2016-01-20  2:39 '/mnt/web/bdy' 0 No status could not negotiate acceptable security parameters sl
  2016-01-20  3:58 ` [9front] " Kurt H Maier
@ 2016-01-20  7:04 ` cinap_lenrek
  2016-01-31 23:49 ` cinap_lenrek
  2 siblings, 0 replies; 4+ messages in thread
From: cinap_lenrek @ 2016-01-20  7:04 UTC (permalink / raw)
  To: 9front

the problem with thepiratebay.org is that it only has ECDSA cipher
suits, we only support RSA right now. (this is for validating the
DH parameters). it does support chacha20/poly1305 tho, which is
nice so once you add ecdsa signature validation it should work.

devever.net only supports AES-GCM cipher, which we do not support.

so:

- implement AES-GCM
	this is a complicated aead cipher, it sucks.

- implement ECDSA signature validation
	aijus ecc.c already has the code for that, theres just
	no integration with tlshand yet

--
cinap


^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: [9front] '/mnt/web/bdy' 0 No status could not negotiate acceptable security parameters
  2016-01-20  2:39 '/mnt/web/bdy' 0 No status could not negotiate acceptable security parameters sl
  2016-01-20  3:58 ` [9front] " Kurt H Maier
  2016-01-20  7:04 ` cinap_lenrek
@ 2016-01-31 23:49 ` cinap_lenrek
  2 siblings, 0 replies; 4+ messages in thread
From: cinap_lenrek @ 2016-01-31 23:49 UTC (permalink / raw)
  To: 9front

>	https://www.devever.net/~hl/nosecuresmartphone
>	https://thepiratebay.org

piratebay.org works now for me with the ecdsa code... will push
soon... one down, one more to go :-)

--
cinap


^ permalink raw reply	[flat|nested] 4+ messages in thread

end of thread, other threads:[~2016-01-31 23:49 UTC | newest]

Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2016-01-20  2:39 '/mnt/web/bdy' 0 No status could not negotiate acceptable security parameters sl
2016-01-20  3:58 ` [9front] " Kurt H Maier
2016-01-20  7:04 ` cinap_lenrek
2016-01-31 23:49 ` cinap_lenrek

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).